Dylan M. Taylor 2b5a3e4a61 ci: lock workflow actions through an actions.lock lockfile ...

Mutable action tags are a supply-chain risk: a moved tag runs different code
without a diff. Every workflow action is now pinned through
.github/workflows/actions.lock, and CI verifies the lockfile so an out-of-sync
or tampered one fails instead of running.

2026-11-12 07:17:36 -05:00

..

workflows

ci: lock workflow actions through an actions.lock lockfile

2026-11-12 07:17:36 -05:00

dependabot.yml

ci: configure Dependabot for Cargo and GitHub Actions

2026-10-18 12:31:36 -06:00