fix(ci): pin third-party actions to full commit SHAs

b10c697

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

SonarQubeCloud

SonarCloud Code Analysis

GitGuardian

GitGuardian Security Checks

CodeQL Security Analysis on: pull_request 3

analyze (javascript-typescript, none)

analyze (cpp, none)

Makefile Blocker on: pull_request 1

check

Dependabot Auto-Merge on: pull_request

automerge

CI/CD Pipeline on: pull_request 9

Test (3.10)

Test (3.11)

Test (3.12)

Security Scan

Build Documentation

Build Docker Image

Performance Benchmarks

Rust CI on: pull_request 7

rust-ci / Detect Cargo.toml

rust-ci / Cargo check + clippy + fmt

rust-ci / Cargo audit (security)

rust-ci / Coverage (tarpaulin + codecov)

rust-ci / Cargo test

Secret Scanner on: pull_request 3

secret-scan / gitleaks

secret-scan / rust-secrets

secret-scan / shell-secrets

Hypatia Security Scan on: pull_request 2

scan / Hypatia Neurosymbolic Analysis

Governance on: pull_request 25

governance / Check Workflow Staleness

governance / Allowlist Preflight

governance / Live Actions policy (credentialed advisory)

governance / Language / package anti-pattern policy

governance / Guix packaging policy (Nix retired)

governance / Security policy checks

governance / Code quality + docs

governance / Well-Known (RFC 9116 + RSR)

governance / Workflow security linter

governance / Actions lockfile verify

governance / Trusted-base reduction policy

governance / Licence consistency

governance / Exemption ratchet

governance / Debt ratchet

governance / Validate Hypatia Baseline

Code scanning results

CodeQL

Hypatia

fix(ci): pin third-party actions to full commit SHAs

Uh oh!

Select a check to view from the sidebar