Skip to content

security: remediate code scanning findings - #12

Merged
rosch100 merged 2 commits into
mainfrom
security/fix-code-scanning
Oct 26, 2026
Merged

rosch100 merged 2 commits into
mainfrom
security/fix-code-scanning

Conversation

@rosch100

Copy link
Copy Markdown
Owner

Summary

  • pin all GitHub Actions and Docker build dependencies
  • restrict workflow token permissions to required jobs
  • document the OpenPGP OSV exception and improve SECURITY.md

Verification

  • go test ./...
  • actionlint
  • OSV-Scanner v2.7.0
  • git diff --check

@rosch100
rosch100 merged commit 2e1cc3e into main Oct 26, 2026
6 checks passed
@rosch100
rosch100 deleted the security/fix-code-scanning branch October 26, 2026 23:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant