subidx/.github/workflows
lakshit verma 74888a20a9
ci: pin actions to commit SHAs, cancel superseded runs
Action references by tag (checkout@v4, setup-go@v5,
govulncheck-action@v1) execute whatever a retargeted tag points at,
so a compromised tag would run with contents:read on this repo. Pin
each to the commit SHA its tag resolves to today, and cancel
superseded runs on the same ref.
2026-08-24 00:44:53 +05:30
..
ci.yml ci: pin actions to commit SHAs, cancel superseded runs 2026-08-24 00:44:53 +05:30