Skip to content

Pin third-party actions to SHAs and scope workflow tokens - #413

Merged
tylervick merged 2 commits into
mainfrom
harden-workflows
Aug 8, 2026
Merged

Pin third-party actions to SHAs and scope workflow tokens#413
tylervick merged 2 commits into
mainfrom
harden-workflows

ci: declare permissions per job, not at workflow level

2b45a72
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis succeeded Aug 8, 2026 in 14s

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

View more details on SonarQubeCloud