Skip to content

ci: harden GitHub Actions automation - #28

Merged
ubugeeei merged 1 commit into
mainfrom
codex/harden-ci-cd
May 18, 2026
Merged

ci: harden GitHub Actions automation#28
ubugeeei merged 1 commit into
mainfrom
codex/harden-ci-cd

Conversation

@ubugeeei

Copy link
Copy Markdown
Member

Summary

  • pin GitHub Actions to full immutable SHAs while preserving upstream version comments
  • scope workflow permissions per job, add explicit runner images, job timeouts, and CI concurrency cancellation
  • add Dependabot grouping for Actions, Cargo, and npm updates plus CI maintenance notes

Verification

  • vp check .github/README.md .github/workflows/ci.yml .github/workflows/playground-pages.yml .github/dependabot.yml
  • go run github.com/rhysd/actionlint/cmd/actionlint@v1.7.12 -color
  • git diff --check
  • vp run ci

Closes #9

@ubugeeei
ubugeeei merged commit 0af31fe into main May 18, 2026
1 check passed
@ubugeeei
ubugeeei deleted the codex/harden-ci-cd branch May 18, 2026 04:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ci: pin GitHub Actions to immutable SHAs

1 participant