From bd5b5e0802ef5d9bb1f232b1014b864044c8efc1 Mon Sep 17 00:00:00 2001
From: Aaron Liang <76561968+AaronL725@users.noreply.github.com>
Date: Wed, 15 Jul 2026 00:11:05 +0800
Subject: [PATCH] chore: run one-shot remaining hardening migration

---
 .../workflows/temp-remaining-hardening.yml    | 27 +++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 .github/workflows/temp-remaining-hardening.yml

diff --git a/.github/workflows/temp-remaining-hardening.yml b/.github/workflows/temp-remaining-hardening.yml
new file mode 100644
index 0000000..09c637e
--- /dev/null
+++ b/.github/workflows/temp-remaining-hardening.yml
@@ -0,0 +1,27 @@
+name: Temporary remaining hardening
+
+on:
+  push:
+    paths:
+      - tools/apply_remaining_hardening.py
+      - .github/workflows/temp-remaining-hardening.yml
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  migrate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Apply source migration
+        run: python tools/apply_remaining_hardening.py
+      - name: Commit source changes and remove temporary files
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git rm -f tools/apply_remaining_hardening.py .github/workflows/temp-remaining-hardening.yml
+          git add -A
+          git commit -m "fix: complete remaining registration hardening"
+          git push