🐛 ci: harden CI against SonarCloud vulnerability findings#358

Merged

Chisanan232 merged 6 commits into

mainfrom

fix/sonarcloud-ci-hardening

Jul 23, 2026

Commits on Jul 23, 2026

🐛 ci(uv): lock resolved versions and disable source builds
Chisanan232
committed
🐛 ci(node): pass --ignore-scripts to pnpm install
Chisanan232
committed
🐛 config(docker): verify rustup checksum and pin+lock pip installs
Chisanan232
committed
🔧 config(sonarcloud): exclude intentional example duplication from CPD
Chisanan232
committed
♻️ ci(uv): make the semantic-kernel --no-build exception self-contained
Chisanan232
committed
♻️ ci(uv): drop dead uv-main/py-script branches for semantic-kernel
Chisanan232
committed