6 Commits

Author	SHA1	Message	Date
Thibaud-Vdb	cca00c022e	ci: pin github actions to commit shas ... Mutable tags like @v6 can be re-pointed by whoever controls the action, so the next run executes code nobody here reviewed, with the job's token and secrets. Pinning to the full commit sha freezes what runs. Version tags are kept as comments so renovate or dependabot can still track updates. dtolnay/rust-toolchain is pinned to a master commit with the toolchain moved to an explicit input, as its readme recommends for sha pinning.	2026-07-20 14:56:59 +02:00
sjorsdonkers	ae6c29ccff	Timouts for all GH actions	2025-05-09 11:20:51 +02:00
Pierre Tachoire	b176857b8d	add bornlex to cla whitelist	2025-04-11 11:14:01 +02:00
Pierre Tachoire	f2565049b8	ci: add Sjors to the cla allow list	2025-03-25 14:40:36 +01:00
Pierre Tachoire	193780a88f	cla: add katie-lpd to the allow list	2024-12-13 14:33:57 +01:00
Pierre Tachoire	f9ddd5c368	contrib: add CLA signature process	2024-11-26 09:35:14 +01:00