DevITWay | Pavel Volkov 69b7f1fb4e chore: pin dependencies to SHA digests for OpenSSF scorecard (#104) ...

Pin scorecard-action and codeql-action to commit SHA in scorecard.yml.
Pin base images to digest in Dockerfile.redos and Dockerfile.astra.
Replace curl|bash with direct binary download for actionlint.
Remove unused pip install cargo-audit-sarif.

2026-04-06 02:28:02 +03:00

9.4 KiB

Raw Blame History

View Raw