Dylan M. Taylor 955d268dc9 ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637) ...

Pin third-party actions to full-length commit SHAs (with version comments)
instead of mutable tags/branches to prevent supply-chain tampering via
retagged releases. Resolves SonarCloud rule githubactions:S7637.

2026-10-21 17:04:23 -04:00

..

ci.yml

CI: run cargo xtask ci on pull requests and pushes to main (#754)

2026-10-11 22:30:39 -04:00

freebsd.yml

CI: run FreeBSD and Windows ARM64 checks nightly and on release, not per PR (#530)

2026-10-11 20:34:27 -04:00

nix.yml

ci: switch to shared nix workflow from craft-common-actions

2026-10-15 23:57:51 -04:00

packaging-lint.yml

ci: refactor workflows to use storytold/craft-common-actions (#639)

2026-10-11 11:50:38 -04:00

printing.yml

ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637)

2026-10-21 17:04:23 -04:00

release.yml

Release workflow: pass the Azure signing secrets so Windows builds are signed (#752)

2026-10-12 00:27:33 -04:00

sonarcloud.yml

ci: add SonarCloud scan via shared reusable workflow

2026-10-21 15:47:09 -04:00

windows-arm64.yml

CI: run FreeBSD and Windows ARM64 checks nightly and on release, not per PR (#530)

2026-10-11 20:34:27 -04:00