chore: pin GitHub Actions to SHA for supply chain security#2

Closed

luis-hong wants to merge 14 commits into

chore/pin-github-actions-sha

Commits on Feb 20, 2026

chore: pin GitHub Actions to SHA (.github/workflows/benchmarking.yml)
luis-hong
committed
chore: pin GitHub Actions to SHA (.github/workflows/release.yml)
luis-hong
committed

Commits on Feb 23, 2026

chore: add security-check workflow for SHA pinning CI
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/benchmarking.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/build.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/codeql-analysis.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/format-code.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/integration-tests.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/lint.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/profile-data-generator.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/release.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/saucelabs-UI-tests.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/test.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/testflight.yml)
luis-hong
committed