Dylan M. Taylor 2823f2b0e2 ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637) ...

Pin third-party actions to full-length commit SHAs (with version comments)
instead of mutable tags/branches to prevent supply-chain tampering via
retagged releases. Resolves SonarCloud rule githubactions:S7637.

2026-10-21 17:04:18 -04:00

..

ci.yml

ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637)

2026-10-21 17:04:18 -04:00

freebsd.yml

i18n: Georgian (ka) interface language

2026-10-19 15:53:03 +04:00

nix.yml

ci: switch to shared nix workflow from craft-common-actions

2026-10-15 23:57:45 -04:00

packaging-lint.yml

ci: retain FigCraft package and metadata checks

2026-10-16 05:24:23 +02:00

release.yml

M9: release fonts: web build embeds craft-fonts, pin back to the Latin manifest (#885)

2026-10-20 04:26:04 +07:00

sonarcloud.yml

ci: add SonarCloud scan via shared reusable workflow

2026-10-21 15:46:57 -04:00

windows-arm64.yml

ci: delegate release, freebsd, windows-arm64, packaging-lint to craft-common-actions and add nix check

2026-10-15 21:39:02 -04:00