Dylan M. TaylorandGitHub f4bc90b93f ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637) (#8368) ...

Pin third-party actions to full-length commit SHAs (with version comments)
instead of mutable tags/branches to prevent supply-chain tampering via
retagged releases. Resolves SonarCloud rule githubactions:S7637.

2026-10-21 20:12:22 -04:00

..

ci.yml

ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637) (#8368)

2026-10-21 20:12:22 -04:00

docs.yml

ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637) (#8368)

2026-10-21 20:12:22 -04:00

freebsd.yml

ci: delegate FreeBSD workflow to craft-common-actions and add nix check

2026-10-15 22:04:09 -04:00

nix.yml

ci: switch to shared nix workflow from craft-common-actions

2026-10-15 23:54:15 -04:00

packaging-lint.yml

ci: add comfortable runtime limits to unbounded jobs

2026-10-15 04:27:54 +02:00

perf-nightly.yml

ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637) (#8368)

2026-10-21 20:12:22 -04:00

release.yml

Release workflow: pass the Azure signing secrets so Windows builds are signed (#3794)

2026-10-12 11:08:34 -04:00

sonarcloud.yml

ci: add SonarCloud scan via shared reusable workflow

2026-10-21 15:47:04 -04:00

windows-arm64.yml

ci: refactor workflows to use storytold/craft-common-actions (#3432)

2026-10-11 11:50:48 -04:00