Skip to content

ci v1.0.1

Choose a tag to compare

View all tags
@hseshadr hseshadr released this 12 Jul 17:37
· 59 commits to main since this release
ci-v1.0.1
0ac876b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security-hardening release for the shared portfolio workflows.

  • Pins third-party Actions to immutable SHAs.
  • Validates reusable-workflow inputs before shell execution.
  • Disables persisted checkout credentials.
  • Adds least-privilege permissions, Dependabot cooldown, security-header baseline, ShellCheck, and a clean full-repository zizmor gate.

ci-v1 now points to this release.

Assets 2
Loading