nils måsén
a2e85b5ef3
revert github/codecov pinning, add version comments
...
GitHubs own actions are fully trusted, let's keep the paranoia on a reasonable level. This includes codecov too.
All other third party actions are pinned, but with a comment about what version they were tagged with before pinning.
2022-10-14 12:12:34 +02:00
StepSecurity Bot
a823fdcc04
[StepSecurity] ci: Harden GitHub Actions
...
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2022-10-13 23:39:20 +00:00
dependabot[bot]
cbbdbb7ad6
chore(deps): bump github/codeql-action from 1 to 2 ( #1353 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-06 17:55:17 +02:00
dependabot[bot]
ab7f8233bb
chore(deps): bump actions/checkout from 2 to 3 ( #1368 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-02 19:19:44 +02:00
Zois Pagoulatos
0961c74e6b
ci: Add codeQL analysis checks ( #770 )
2021-01-12 20:43:41 +01:00
