ci: harden GitHub Actions workflows#185

Merged

flavorjones merged 8 commits intomainfrom

harden-github-actions

Mar 20, 2026

Commits on Mar 20, 2026

Add GitHub Actions audit job (actionlint + zizmor) to CI

flavorjones
and
claude
committed
Configure dependabot for GitHub Actions, bundler, and Docker

flavorjones
and
claude
committed
Add local GitHub Actions linting (actionlint + zizmor) to bin/setup and bin/ci

flavorjones
and
claude
committed
Pin all GitHub Actions to SHA hashes

flavorjones
and
claude
committed
Fix high severity zizmor findings

flavorjones
and
claude
committed
Fix medium severity zizmor findings

flavorjones
and
claude
committed
Fix informational template-injection findings in publish-image.yml

flavorjones
and
claude
committed
Update brakeman to 8.0.4

flavorjones
and
claude
committed