Commit Graph
4 Commits
Author SHA1 Message Date
Diogo Teles Sant'AnnaandJesse Beder c7639e81d5 ci: configure dependabot to montly update GHAs
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
2023-12-14 09:13:33 -06:00
Diogo Teles Sant'AnnaandJesse Beder f30582fb09 ci: hash-pin sensitive workflow dependency
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
2023-12-14 09:13:33 -06:00
Diogo Teles Sant'AnnaandGitHub f6c8b17c3a Create Security-Policy (#1189) 2023-08-10 15:02:27 -04:00
Diogo Teles Sant'AnnaandGitHub d7f672d141 CI: define read-only permission for GitHub Workflow (#1175)
It secures the repo against erroneous or malicious actions from external jobs you call from your workflow. It's specially important for the case they get compromised, for example.
2023-03-03 23:33:51 -06:00