From 0f97680c360485fdf76a087eb4586a4483c90c03 Mon Sep 17 00:00:00 2001
From: Aaron Liang <76561968+AaronL725@users.noreply.github.com>
Date: Wed, 15 Jul 2026 00:13:02 +0800
Subject: [PATCH] fix: preprocess scoped OIDC migration edit

---
 .github/workflows/temp-remaining-hardening.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/temp-remaining-hardening.yml b/.github/workflows/temp-remaining-hardening.yml
index 09c637e..f9500d2 100644
--- a/.github/workflows/temp-remaining-hardening.yml
+++ b/.github/workflows/temp-remaining-hardening.yml
@@ -4,6 +4,7 @@ on:
   push:
     paths:
       - tools/apply_remaining_hardening.py
+      - tools/fix_remaining_patch_oidc_scope.py
       - .github/workflows/temp-remaining-hardening.yml
   workflow_dispatch:
 
@@ -15,13 +16,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+      - name: Repair OIDC migration scope
+        run: python tools/fix_remaining_patch_oidc_scope.py
       - name: Apply source migration
         run: python tools/apply_remaining_hardening.py
       - name: Commit source changes and remove temporary files
         run: |
           git config user.name "github-actions[bot]"
           git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git rm -f tools/apply_remaining_hardening.py .github/workflows/temp-remaining-hardening.yml
+          git rm -f tools/apply_remaining_hardening.py tools/fix_remaining_patch_oidc_scope.py .github/workflows/temp-remaining-hardening.yml
           git add -A
           git commit -m "fix: complete remaining registration hardening"
           git push