Skip to content

cmd-stream-go v0.7.2

Choose a tag to compare

@ymz-ncnk ymz-ncnk released this 06 May 00:38
· 7 commits to main since this release
31c6a02

🛡️ Security & SAST

  • CodeQL Integration: Added deep semantic security scanning (SAST).
  • Least Privilege: Restricted workflow token permissions to contents: read.

⛓️ Supply Chain Security

  • Action Pinning: Pinned all GitHub Actions to commit SHAs to prevent supply chain attacks.
  • Dependabot: Added automated updates for Actions and Go dependencies.

📖 Documentation & Maintenance

  • CONTRIBUTING.md: Consolidated the Static Analysis section for a better contributor experience.
  • Cleanup: Removed coverage.txt from the repository.