Skip to content

v1.3.2

Choose a tag to compare

@DouglasVulcano DouglasVulcano released this 12 Sep 05:14
· 14 commits to main since this release
fcbc9e8

Security

  • Pinned the repo's own CI action (actions/checkout) to a full commit SHA with a version comment,
    and added .github/dependabot.yml (grouped, weekly) to keep it current. SECURITY.md now states the
    posture accurately: this repo pins to SHA; scaffolded templates default to major-version tags
    (which receive patches) and can be pinned for the strictest posture.