Repository navigation

ci: security hardening (dependabot, secret/dep/workflow scanning, pinned actions) - #246

Closed

glebedel wants to merge 4 commits into

mainfrom

s2d2/security-hardening-2026-11

Closed

ci: security hardening (dependabot, secret/dep/workflow scanning, pinned actions)#246
glebedel wants to merge 4 commits into
mainfrom
s2d2/security-hardening-2026-11

Commits on Nov 2, 2026
- ci: add report-only osv-scanner and zizmor security scan
  
  committed
  b48decd
- ci: drop redundant cleanup in osv-scanner install
  
  s2d2-s1
  and
  claude
  committed
  9167904
- ci: rename security scan to .yaml and fail when a scan does not complete
  
  committed
  ad7ef40
- ci: pin the osv-scanner hash and fail only when a scanner fails
  
  committed
  868dac7