Christian Visintin cdd4c60805 ci: pin all actions to verified SHAs and clear zizmor findings ...

Pin every action to a commit SHA whose tag comment matches (verified via gh api),
add least-privilege permissions, set persist-credentials: false, and replace the
archived actions-rs/cargo with a plain cargo test. zizmor clean at default persona.

2026-06-07 16:58:51 +02:00

1.1 KiB

Raw Blame History

View Raw