fix(ci): pin third-party actions to full commit SHAs

55b060c

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

SonarQubeCloud

SonarCloud Code Analysis

GitGuardian

GitGuardian Security Checks

Workflow Security Linter on: push 1

E2E + Aspect + Bench on: pull_request 1

E2E (coordination repo — nothing to exercise)

Secret Scanner on: pull_request 3

scan / gitleaks

scan / rust-secrets

scan / shell-secrets

Governance on: pull_request 23

governance / Check Workflow Staleness

governance / Allowlist Preflight

governance / Live Actions policy (credentialed advisory)

governance / Language / package anti-pattern policy

governance / Guix packaging policy (Nix retired)

governance / Security policy checks

governance / Code quality + docs

governance / Well-Known (RFC 9116 + RSR)

governance / Workflow security linter

governance / Actions lockfile verify

governance / Trusted-base reduction policy

governance / Licence consistency

governance / Exemption ratchet

governance / Debt ratchet

governance / Validate Hypatia Baseline

Hypatia Security Scan on: pull_request 2

scan / Hypatia Neurosymbolic Analysis

Coordination Boundary on: pull_request 1

Static Analysis Gate on: pull_request 1

Workflow Security Linter on: pull_request 1

Code Quality on: pull_request 1

Runtime Policy on: pull_request 1

Guix/Nix Package Policy on: pull_request 1

CodeQL Security Analysis on: pull_request 1

Security Policy on: pull_request 1

Dependabot Auto-Merge on: pull_request 1

RSR Anti-Pattern Check on: pull_request 1

OpenSSF Compliance on: pull_request 1

Dogfood Gate on: pull_request 1

Code scanning results

Hypatia

fix(ci): pin third-party actions to full commit SHAs

Uh oh!

Select a check to view from the sidebar