Greyson LaLonde 09ffe87fbb ci: ignore pip-audit findings without published fixes ...

Adds joblib, markdown, nltk, onnx, pyjwt, torch and transformers
advisories that have no fixed version available (or are disputed)
to the pip-audit ignore list. Rationale recorded next to each ID.

2026-05-20 21:40:30 +08:00

..

build-uv-cache.yml

ci: pin third-party actions to commit SHAs

2026-05-20 19:01:53 +08:00

codeql.yml

chore: fix codeql coverage and action version (#4454)

2026-02-11 18:20:07 +08:00

docs-broken-links.yml

fix: pin Node to LTS 22 in docs broken links workflow

2026-03-27 02:36:11 +08:00

generate-tool-specs.yml

ci: pin third-party actions to commit SHAs

2026-05-20 19:01:53 +08:00

linter.yml

ci: pin third-party actions to commit SHAs

2026-05-20 19:01:53 +08:00

nightly.yml

ci: pin third-party actions to commit SHAs

2026-05-20 19:01:53 +08:00

pr-size.yml

ci: pin third-party actions to commit SHAs

2026-05-20 19:01:53 +08:00

pr-title.yml

ci: pin third-party actions to commit SHAs

2026-05-20 19:01:53 +08:00

publish.yml

ci: pin third-party actions to commit SHAs

2026-05-20 19:01:53 +08:00

stale.yml

Feature/add workflow permissions (#1749)

2024-12-12 12:31:43 -05:00

tests.yml

ci: pin third-party actions to commit SHAs

2026-05-20 19:01:53 +08:00

type-checker.yml

ci: pin third-party actions to commit SHAs

2026-05-20 19:01:53 +08:00

update-test-durations.yml

ci: pin third-party actions to commit SHAs

2026-05-20 19:01:53 +08:00

vulnerability-scan.yml

ci: ignore pip-audit findings without published fixes

2026-05-20 21:40:30 +08:00