veilor-os/.github/workflows
veilor-org 631e7bd040 ci: TODO marker for SHA-pinning third-party actions
Note that all `uses:` directives still resolve to mutable major-
version tags. SHA-pinning is the Agent 8 audit recommendation but
requires per-action web lookups that stalled the previous SRE
attempt; tracked separately so this PR can land first.
2026-05-06 16:10:03 +01:00
..
build-bluebuild.yml ci(bluebuild): pin actions to node20-safe tags 2026-05-06 13:54:12 +01:00
build-iso.yml ci: TODO marker for SHA-pinning third-party actions 2026-05-06 16:10:03 +01:00
lint.yml ci(bluebuild): pin actions to node20-safe tags 2026-05-06 13:54:12 +01:00