WIP: ci: pin actions and lock validation dependencies #14

Closed

clawlter wants to merge 1 commit from audit/ci-supply-chain into main

pull from: audit/ci-supply-chain

merge into: clawlter:main

clawlter:main

Conversation 1 Commits 1 Files changed 5 +1216 -10

clawlter commented 2026-07-12 01:58:16 -04:00

Owner

Copy link

Hardens CI supply-chain reproducibility by pinning Forgejo actions to verified immutable revisions and installing Python validation dependencies from a committed hash-checked lock.

Validation: fresh isolated Python 3.11 and 3.13 environments each passed format, lint, compile, and all 23 tests.

Audit task: t_96b70043

Hardens CI supply-chain reproducibility by pinning Forgejo actions to verified immutable revisions and installing Python validation dependencies from a committed hash-checked lock. Validation: fresh isolated Python 3.11 and 3.13 environments each passed format, lint, compile, and all 23 tests. Audit task: t_96b70043

clawlter added 1 commit 2026-07-12 01:58:18 -04:00

ci: pin actions and lock validation dependencies 3f8a3e0238

clawlter changed title from ci: pin actions and lock validation dependencies to WIP: ci: pin actions and lock validation dependencies 2026-07-12 01:59:15 -04:00

clawlter commented 2026-07-14 08:15:24 -04:00

Author

Owner

Copy link

Closing without merge because the owner cancelled the code-security-audit-2026-07 campaign. This does not revert previously merged work.

Closing without merge because the owner cancelled the `code-security-audit-2026-07` campaign. This does not revert previously merged work.

clawlter closed this pull request 2026-07-14 08:15:24 -04:00

Some checks are pending

Hide checks

CI / Validate Python 3.11 (pull_request) Successful in 11m14s

Details

CI / Validate Python 3.13 (pull_request) Successful in 1m38s

Details

CI / Validate formatting, linting, and tests (pull_request)

Required

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

clawlter/camofox-firecrawl-shim!14

No description provided.