Harden CI workflows and install.sh against supply-chain attacks - #56

Open

n8agrin wants to merge 4 commits into

mainfrom

security/harden-workflows-and-install

Commits on May 12, 2026

ci: pin third-party actions to commit SHAs

n8agrin
and
claude
committed
126b775
ci: add minimum top-level permissions to workflows

n8agrin
and
claude
committed
13380d3
install.sh: fail closed when no sha256 tool is available

n8agrin
and
claude
committed
e23ea06

Commits on Sep 14, 2026

Merge branch 'main' into security/harden-workflows-and-install
ernestoongaro
authored
5540434