Stirling-PDF/.github
StepSecurity Bot 6496015af7
[StepSecurity] ci: Harden GitHub Actions (#3901)
## Summary

This pull request is created by
[StepSecurity](https://app.stepsecurity.io/securerepo) at the request of
@Ludy87. Please merge the Pull Request to incorporate the requested
changes. Please tag @Ludy87 on your message if you have any questions
related to the PR.
## Security Fixes

### Pinned Dependencies

GitHub Action tags and Docker tags are mutable. This poses a security
risk. GitHub's Security Hardening guide recommends pinning actions to
full length commit.

- [GitHub Security
Guide](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions)
- [The Open Source Security Foundation (OpenSSF) Security
Guide](https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies)


## Feedback
For bug reports, feature requests, and general feedback; please email
support@stepsecurity.io. To create such PRs, please visit
https://app.stepsecurity.io/securerepo.


Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2025-07-07 22:21:58 +01:00
..
actions/setup-bot Standardize GitHub App Bot Authentication Across Workflows (#3582) 2025-05-27 12:36:41 +01:00
config Update repo_devs.json 2025-06-23 23:24:31 +01:00
ISSUE_TEMPLATE
scripts deps: update Python requirements and add --strip-extras flag (#3887) 2025-07-07 10:05:23 +01:00
workflows [StepSecurity] ci: Harden GitHub Actions (#3901) 2025-07-07 22:21:58 +01:00
CODEOWNERS
dependabot.yml
labeler-config-srvaroa.yml docs: restructure documentation paths, update PR template links, and add exception handling guide (#3885) 2025-07-07 09:49:44 +01:00
labeler-config.yml Multi module refactor (#3640) 2025-06-09 12:51:41 +01:00
labels.yml chore: expand GitHub label configuration with size, language, and workflow labels (#3778) 2025-06-19 15:40:26 +01:00
pull_request_template.md docs: restructure documentation paths, update PR template links, and add exception handling guide (#3885) 2025-07-07 09:49:44 +01:00
release.yml Add Devtools labels and update labeler configuration (#3148) 2025-03-10 08:20:04 +00:00