Dylan M. Taylor dbc7130b36 ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637) (#3932) ...

Pin third-party actions to full-length commit SHAs (with version comments)
instead of mutable tags/branches to prevent supply-chain tampering via
retagged releases. Resolves SonarCloud rule githubactions:S7637.

2026-10-21 20:14:11 -04:00

..

ci.yml

ci: pin GitHub Actions to full commit SHA (SonarCloud githubactions:S7637) (#3932)

2026-10-21 20:14:11 -04:00

freebsd.yml

M7: support shaped Thai text in Add Text and UI fallback fonts (#767)

2026-10-11 18:07:36 -04:00

nix.yml

ci: switch to shared nix workflow from craft-common-actions

2026-10-15 23:57:29 -04:00

packaging-lint.yml

ci: refactor workflows to use storytold/craft-common-actions (#1073)

2026-10-11 11:51:25 -04:00

release.yml

Release workflow: pass the Azure signing secrets so Windows builds are signed (#1194)

2026-10-12 11:08:29 -04:00

sonarcloud.yml

ci: add SonarCloud scan via shared reusable workflow

2026-10-21 15:47:03 -04:00

windows-arm64.yml

ci: refactor workflows to use storytold/craft-common-actions (#1073)

2026-10-11 11:51:25 -04:00