chore: harden security workflow - #5

Merged

vaguul merged 1 commit into

mainfrom

chore/harden-security-workflow

Jul 14, 2026

vaguul commented Jul 14, 2026

Owner

Summary

pin third-party GitHub Actions to immutable commit SHAs
add a seven-day Dependabot cooldown where applicable
preserve the existing security and validation behavior

Validation

uvx semgrep scan --config auto --error (0 findings)
git diff --check


          chore: harden security workflow

8cb2a5d

vaguul merged commit b159d7d into main

3 checks passed

vaguul deleted the chore/harden-security-workflow branch

July 14, 2026 13:39

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet