ci: harden GitHub Actions workflows - #57

Merged

flavorjones merged 7 commits into

harden-github-actions

Mar 20, 2026

Commits on Mar 20, 2026

Add zizmor and actionlint CI job for GitHub Actions auditing

flavorjones
and
claude
committed
c3fc39d
Configure dependabot for github-actions and bundler with batching and cooldowns

flavorjones
and
claude
committed
15e22db
Pin all GitHub Actions to SHA hashes

flavorjones
and
claude
committed
ac8d246
Suppress unpinned-images for redis service container

flavorjones
and
claude
committed
c6083a5
Fix excessive-permissions and artipacked findings

flavorjones
and
claude
committed
225682f
Suppress unpinned-images for postgres and percona service containers

flavorjones
and
claude
committed
876f986
Pin redis service container to major version tag

flavorjones
and
claude
committed
843d162