Greyson LaLonde fb6930d78e ci: pin third-party actions to commit SHAs ...

Replaces version tags (e.g. astral-sh/setup-uv@v6, slackapi/slack-github-action@v2.1.0)
with full commit SHAs across every workflow. Mitigates supply-chain risk from
mutable tags.

2026-05-20 01:36:47 +08:00

..

build-uv-cache.yml

ci: pin third-party actions to commit SHAs

2026-05-20 01:36:47 +08:00

codeql.yml

chore: fix codeql coverage and action version (#4454)

2026-02-11 18:20:07 +08:00

docs-broken-links.yml

fix: pin Node to LTS 22 in docs broken links workflow

2026-03-27 02:36:11 +08:00

generate-tool-specs.yml

ci: pin third-party actions to commit SHAs

2026-05-20 01:36:47 +08:00

linter.yml

ci: pin third-party actions to commit SHAs

2026-05-20 01:36:47 +08:00

nightly.yml

ci: pin third-party actions to commit SHAs

2026-05-20 01:36:47 +08:00

pr-size.yml

ci: pin third-party actions to commit SHAs

2026-05-20 01:36:47 +08:00

pr-title.yml

ci: pin third-party actions to commit SHAs

2026-05-20 01:36:47 +08:00

publish.yml

ci: pin third-party actions to commit SHAs

2026-05-20 01:36:47 +08:00

stale.yml

Feature/add workflow permissions (#1749)

2024-12-12 12:31:43 -05:00

tests.yml

ci: pin third-party actions to commit SHAs

2026-05-20 01:36:47 +08:00

type-checker.yml

ci: pin third-party actions to commit SHAs

2026-05-20 01:36:47 +08:00

update-test-durations.yml

ci: pin third-party actions to commit SHAs

2026-05-20 01:36:47 +08:00

vulnerability-scan.yml

ci: pin third-party actions to commit SHAs

2026-05-20 01:36:47 +08:00