Harden CI: keep every action reference pinned to a commit SHA - #5305

Merged

vivekchand merged 30 commits into

mainfrom

harden/enforce-sha-pinned-action-refs

Sep 10, 2026

Commits on Sep 5, 2026

Harden CI: keep every action reference pinned to a commit SHA
claude
committed
f411ec7
Add the check_action_refs.py half that the test depends on
claude
committed
9d84913

Commits on Sep 7, 2026

Merge branch 'main' into harden/enforce-sha-pinned-action-refs
vivekchand
authored
2a7f328
Merge branch 'main' into harden/enforce-sha-pinned-action-refs
vivekchand
authored
a180ea6
Merge branch 'main' into harden/enforce-sha-pinned-action-refs
vivekchand
authored
3bba873
Merge branch 'main' into harden/enforce-sha-pinned-action-refs
vivekchand
authored
6f266b0
Run the SHA-pin guard in CI, where it was named in no job at all
claude
committed
0094bb6
Merge branch 'main' into harden/enforce-sha-pinned-action-refs
vivekchand
authored
b5a1ce0

Commits on Sep 8, 2026