Dylan M. Taylor 26d0ecba74 ci: lock workflow actions through an actions.lock lockfile ...

Mutable action tags are a supply-chain risk: a moved tag runs different code
without a diff. Every workflow action is now pinned through
.github/workflows/actions.lock, and CI verifies the lockfile so an out-of-sync
or tampered one fails instead of running.

2026-11-12 07:16:24 -05:00

..

actions.lock

ci: lock workflow actions through an actions.lock lockfile

2026-11-12 07:16:24 -05:00

ci.yml

ci: lock workflow actions through an actions.lock lockfile

2026-11-12 07:16:24 -05:00

freebsd.yml

Migrate DeckCraft to egui 0.37 (#1350)

2026-10-25 10:48:52 -04:00

house-rules.yml

Copy the shared house rules into AGENTS.md.

2026-11-06 11:50:01 +01:00

nix.yml

ci: switch to shared nix workflow from craft-common-actions

2026-10-15 23:57:56 -04:00

packaging-lint.yml

ci: lock workflow actions through an actions.lock lockfile

2026-11-12 07:16:24 -05:00

release.yml

CI: nightly release dry run (#2052)

2026-11-11 23:03:54 +01:00

sonarcloud.yml

ci(sonar): don't cancel superseded runs on main, so coverage is published

2026-10-23 16:51:48 -04:00

windows-arm64.yml

CI: workflows only call craft-common-actions at @main (#1557)

2026-10-29 22:14:18 -04:00