Skip to content

Add secure Swift CI - #46

Merged
thrr87 merged 1 commit into
mainfrom
codex/add-secure-ci
Jul 25, 2026
Merged

thrr87 merged 1 commit into
mainfrom
codex/add-secure-ci

Conversation

@thrr87

@thrr87 thrr87 commented Jul 25, 2026

Copy link
Copy Markdown
Owner

Summary

  • add the same SHA-pinned Swift CI workflow used by thrr87/codex-limits
  • run Swift tests for pull requests and pushes to main
  • keep the workflow token read-only and cancel superseded runs

Security

  • actions/checkout is pinned to a full commit SHA
  • repository policy already restricts Actions to GitHub-owned actions and requires SHA pinning
  • workflow-level permissions are limited to contents: read

Verification

  • swift test — 43 tests passed locally
  • git diff --check passed

@thrr87
thrr87 marked this pull request as ready for review July 25, 2026 17:40
@thrr87
thrr87 merged commit 576786b into main Jul 25, 2026
1 check passed
@thrr87
thrr87 deleted the codex/add-secure-ci branch July 25, 2026 17:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant