Dylan M. Taylor ae29fbc6ec fix(sonarcloud): explicitly allow Ubuntu ESM HTTPS egress (#217)

2026-11-11 19:25:34 -05:00

..

ast-grep.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

changed-paths.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

docker-build.yml

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00

flatpak-oci.yml

apt: fall back to mirrors outside ubuntu.com when it is down (#199)

2026-11-11 16:21:03 +01:00

freebsd.yml

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00

gate.yml

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00

git-sources.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

house-rules.yml

ci: add allowed-endpoints to packaging-lint and house-rules workflows

2026-11-10 08:26:20 -05:00

nix.yml

ci: harden workflows with credential isolation, template injection defenses, and dependabot cooldown (#191)

2026-11-10 18:07:38 -05:00

packaging-lint.yml

egress: allow *.kernel.org and *.dotsrc.org wherever apt mirrors are allowed (#203)

2026-11-11 11:20:38 -05:00

refresh-contributors.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

release.yml

release.yml: a dry-run input builds and checks without releasing (#208)

2026-11-11 22:46:06 +01:00

sonar-scan.yml

ci(sonar): skip SonarCloud scan on fork pull requests (#48)

2026-10-21 19:04:08 -04:00

sonarcloud.yml

fix(sonarcloud): explicitly allow Ubuntu ESM HTTPS egress (#217)

2026-11-11 19:25:34 -05:00

supply-chain.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

test-ast-grep.yml

ci: specify allowed-endpoints for block mode in workflows

2026-11-10 08:26:20 -05:00

test-freebsd.yml

egress: allow *.kernel.org and *.dotsrc.org wherever apt mirrors are allowed (#203)

2026-11-11 11:20:38 -05:00

test-house-rules.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

test-install-apt-packages.yml

egress: allow *.kernel.org and *.dotsrc.org wherever apt mirrors are allowed (#203)

2026-11-11 11:20:38 -05:00

test-install-riscv64-cross.yml

install-riscv64-cross: fall back to mirrors outside ubuntu.com (#202)

2026-11-11 17:01:34 +01:00

windows-arm64.yml

ci: use StepSecurity's maintained actions (#206)

2026-11-11 14:55:40 -05:00