ci: harden CI/CD security#6

Merged

jpr5 merged 3 commits into

mainfrom

ci/supply-chain-hardening

May 15, 2026

Commits on May 15, 2026

ci: harden existing workflows — SHA pins, permissions, shell injection, persist-credentials
jpr5
committed
ci: add zizmor static analysis for workflow security
jpr5
committed
ci: add Dependabot daily with auto-merge and major-version analysis
jpr5
committed