Dylan M. Taylor f4bc90b93f ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637) (#8368) ...

Pin third-party actions to full-length commit SHAs (with version comments)
instead of mutable tags/branches to prevent supply-chain tampering via
retagged releases. Resolves SonarCloud rule githubactions:S7637.

2026-10-21 20:12:22 -04:00

..

workflows

ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637) (#8368)

2026-10-21 20:12:22 -04:00

actionlint.yaml

actionlint: declare the org macos-release runner label (#927)

2026-10-07 22:03:51 -04:00

dependabot.yml

ci: configure Dependabot for Cargo and GitHub Actions

2026-10-18 12:31:45 -06:00