Commit Graph
6 Commits
Author SHA1 Message Date
Thibaud-Vdb cca00c022e ci: pin github actions to commit shas
Mutable tags like @v6 can be re-pointed by whoever controls the action,
so the next run executes code nobody here reviewed, with the job's
token and secrets. Pinning to the full commit sha freezes what runs.
Version tags are kept as comments so renovate or dependabot can still
track updates.

dtolnay/rust-toolchain is pinned to a master commit with the toolchain
moved to an explicit input, as its readme recommends for sha pinning.
2026-07-20 14:56:59 +02:00
sjorsdonkers ae6c29ccff Timouts for all GH actions 2025-05-09 11:20:51 +02:00
Pierre Tachoire b176857b8d add bornlex to cla whitelist 2025-04-11 11:14:01 +02:00
Pierre Tachoire f2565049b8 ci: add Sjors to the cla allow list 2025-03-25 14:40:36 +01:00
Pierre Tachoire 193780a88f cla: add katie-lpd to the allow list 2024-12-13 14:33:57 +01:00
Pierre Tachoire f9ddd5c368 contrib: add CLA signature process 2024-11-26 09:35:14 +01:00