mirror of
https://github.com/vee1e/subidx.git
synced 2026-09-01 17:57:13 +00:00
Action references by tag (checkout@v4, setup-go@v5, govulncheck-action@v1) execute whatever a retargeted tag points at, so a compromised tag would run with contents:read on this repo. Pin each to the commit SHA its tag resolves to today, and cancel superseded runs on the same ref. |
||
|---|---|---|
| .. | ||
| ci.yml | ||