fix(ci): pin third-party actions to full commit SHAs

df8e6a6

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

.github/workflows/cargo-audit.yml on: push 1

GitGuardian

GitGuardian Security Checks

.github/workflows/release.yml on: push 1

.github/workflows/coverage.yml on: push 1

Rust CI on: pull_request 3

rust-ci / Detect Cargo.toml

rust-ci / Cargo check + clippy + fmt

rust-ci / Cargo audit (security)

rust-ci / llvm-cov line coverage

rust-ci / Cargo test

Governance on: pull_request 32

governance / Check Workflow Staleness

governance / Allowlist Preflight

governance / Live Actions policy (credentialed advisory)

governance / Language / package anti-pattern policy

governance / Guix packaging policy (Nix retired)

governance / Security policy checks

governance / Code quality + docs

governance / Well-Known (RFC 9116 + RSR)

governance / Workflow security linter

governance / Actions lockfile verify

governance / Trusted-base reduction policy

governance / Licence consistency

governance / Exemption ratchet

governance / Debt ratchet

governance / Validate Hypatia Baseline

Hypatia Security Scan on: pull_request 2

scan / Hypatia Neurosymbolic Analysis

Secret Scanner on: pull_request 4

scan / gitleaks

scan / rust-secrets

scan / shell-secrets

Dependency Review on: pull_request 1

bridge-gate on: pull_request 1

Dogfood Gate on: pull_request 1

CodeQL Security Analysis on: pull_request 1

chapel-ci on: pull_request 1

Code scanning results

Hypatia

fix(ci): pin third-party actions to full commit SHAs

Uh oh!

Select a check to view from the sidebar