Dylan M. Taylor 411a4915a1 ci: run Harden-Runner on every job (#6327) ...

Adds step-security/harden-runner (audit, pinned to v2.22.4 like
craft-common-actions) as the first step of each job that did not have it,
so every workflow in the org's public repos reports its egress to
StepSecurity. Audit, not block: block-mode allow lists come from each
job's observed traffic.

2026-11-11 12:44:00 -05:00

..

ci.yml

Release and CI: the suite's craft-fonts pin (bfcbf714, the same fonts as a71c20e) instead of an app override (#3888)

2026-10-24 21:05:19 +00:00

freebsd.yml

Release and CI: the suite's craft-fonts pin (bfcbf714, the same fonts as a71c20e) instead of an app override (#3888)

2026-10-24 21:05:19 +00:00

house-rules.yml

Copy the shared house rules into AGENTS.md.

2026-11-06 11:50:02 +01:00

nix.yml

…

packaging-lint.yml

ci: run Harden-Runner on every job (#6327)

2026-11-11 12:44:00 -05:00

printing.yml

ci: run Harden-Runner on every job (#6327)

2026-11-11 12:44:00 -05:00

release.yml

Release: refresh contributor credits for each release (#5844) (#5845)

2026-11-08 01:31:33 +01:00

sonarcloud.yml

…

windows-arm64.yml

CI: workflows only call craft-common-actions at @main (#4919)

2026-10-29 22:17:20 -04:00