DevITWay | Pavel Volkov 0c95fa9786 fix: revert codeql-action to tag in scorecard.yml (#105) ...

Scorecard webapp verifies upload-sarif action by tag, not SHA.
Pinning to SHA causes imposter commit error on webapp submission.

2026-04-06 02:38:06 +03:00

..

ci.yml

chore: pin dependencies to SHA digests for OpenSSF scorecard (#104)

2026-04-06 02:28:02 +03:00

codeql.yml

ci: improve OpenSSF Scorecard rating (#45)

2026-03-19 11:51:11 +03:00

release.yml

fix: cosign sign-blob use --bundle format (new cosign default) (#103)

2026-04-06 01:52:55 +03:00

scorecard.yml

fix: revert codeql-action to tag in scorecard.yml (#105)

2026-04-06 02:38:06 +03:00