Dylan M. Taylor 83e81167c6 ci: add StepSecurity Harden-Runner to every workflow job ...

Adds step-security/harden-runner (v2.22.4, SHA-pinned) as the first step of
every job in the reusable and repo workflows, in egress-policy: audit mode.
Audit mode only records network, file and process activity; it blocks nothing.
Unsupported environments (containers, FreeBSD VM guests, ubuntu-slim) are
skipped by the action itself. Dependabot's github-actions group keeps the pin
current.

2026-11-10 08:26:20 -05:00

..

workflows

ci: add StepSecurity Harden-Runner to every workflow job

2026-11-10 08:26:20 -05:00

dependabot.yml

Create dependabot.yml (#30)

2026-10-19 01:14:25 -04:00