ECC/.github/workflows
Affaan Mustafa daf0355531
ci: harden workflow install boundaries
- run non-test workflow installs with npm ci --ignore-scripts where lifecycle scripts are not needed\n- reject plain npm ci in workflows with write permissions\n- reject actions/cache in id-token: write workflows to reduce OIDC publish cache-poisoning risk
2026-05-12 21:55:36 -04:00
..
ci.yml ci: harden workflow install boundaries 2026-05-12 21:55:36 -04:00
maintenance.yml ci: harden workflow install boundaries 2026-05-12 21:55:36 -04:00
monthly-metrics.yml build(deps): bump actions/github-script from 8.0.0 to 9.0.0 2026-04-12 04:52:39 +00:00
release.yml ci: ignore install scripts in release workflows (#1839) 2026-05-12 21:36:36 -04:00
reusable-release.yml ci: ignore install scripts in release workflows (#1839) 2026-05-12 21:36:36 -04:00
reusable-test.yml ci: keep package manager cache failures non-blocking 2026-05-12 18:03:30 -04:00
reusable-validate.yml fix: harden CI validators 2026-05-11 03:08:43 -04:00