mirror of
https://github.com/suitenumerique/meet.git
synced 2026-10-13 00:11:36 +00:00
lebaudantoine
f172c5795e
Wire Menshen into the CI to scan the GitHub Actions we use and flag vulnerable ones, following the same approach as other projects that recently adopted it. Note: I am not fully sure about the current setup. Reviewers should feel free to adjust the configuration or the integration point as they see fit.
6 lines
88 B
YAML
6 lines
88 B
YAML
rules:
|
|
unpinned-uses:
|
|
config:
|
|
policies:
|
|
"suitenumerique/*": ref-pin
|