Scope Security Audit workflow concurrency by trigger type

[Copilot]

Security Audit runs were sharing one concurrency group per ref, so runs from different events (schedule, push, PR, manual dispatch) could cancel each other. This change partitions concurrency by event name while preserving cancellation within the same ref+event lane.

• Concurrency key update

  • Changed workflow concurrency group from ref-only to ref+event:
    • before: security-${{ github.ref }}
    • after: security-${{ github.ref }}-${{ github.event_name }}
  • Keeps cancel-in-progress: true behavior for duplicate runs of the same trigger type.

• Operational impact

  • Scheduled runs no longer cancel push/PR/manual runs on the same branch.
  • Each trigger type now has independent concurrency control.

concurrency:
  group: security-${{ github.ref }}-${{ github.event_name }}
  cancel-in-progress: true

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
servio	Ready	Preview	Sep 1, 2026 2:49pm UTC

[hrx01-dev]

Approving ..

[github-actions]

Visit the preview URL for this PR (updated for commit c3833de):

https://servio-0--pr494-copilot-fix-security-ogfnc80f.web.app

_{(expires Tue, 08 Sep 2026 14:53:42 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

_{Sign: 15915abb5951eb298a844eda460b24f444d93a69}