Skip to content

ci: harden - #999

Open
pajlada wants to merge 3 commits into
masterfrom
ci/harden
Open

ci: harden#999
pajlada wants to merge 3 commits into
masterfrom
ci/harden

Conversation

@pajlada

@pajlada pajlada commented Aug 25, 2026

Copy link
Copy Markdown
Member
  • dependabot: add a 7 day cooldown period
  • ci: pin to commit hashes
  • ci: don't persist credentials
    this will require a little bit of testing, there's a chance the
    update-resources action needs these credentials

using https://zizmor.sh/

this will require a little bit of testing, there's a chance the
update-resources action needs these credentials
@pajlada
pajlada marked this pull request as ready for review August 25, 2026 13:53
@pajlada
pajlada enabled auto-merge (squash) August 25, 2026 13:55
@pajlada
pajlada requested a review from iProdigy August 25, 2026 13:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant