 César Arroba
|
1b9a44b164
|
fix(ci): keep the cloud sync dispatch payload within the 10-property limit (#12370)
|
2026-08-06 12:31:37 +02:00 |
|
|
César Arroba
|
b684ad06f3
|
ci: forward stacked PR metadata in the cloud sync dispatch (#12368)
|
2026-08-06 12:24:48 +02:00 |
|
|
César Arroba
|
76d7a2882c
|
ci: quote the unquoted shell expansions in workflows (#12365)
|
2026-08-06 11:59:40 +02:00 |
|
|
stepsecurity-app[bot]andPepe Fagoaga
|
2a077cae5e
|
feat(security): security best practices from StepSecurity (#11937)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-07-10 09:00:40 +02:00 |
|
|
César Arroba
|
aec500ee3b
|
fix(ci): harden pull_request_target workflows (persist-credentials + toJson) (#11747)
|
2026-06-30 18:29:29 +02:00 |
|
|
dependabot[bot]
|
c660b35ed6
|
chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 (#11267)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-21 09:33:57 +02:00 |
|
|
dependabot[bot]
|
6ef70484c7
|
chore(deps): bump step-security/harden-runner from 2.16.0 to 2.19.1 (#10953)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-21 08:32:05 +02:00 |
|
|
stepsecurity-app[bot]andPepe Fagoaga
|
96e7d6cb3a
|
feat(security): security best practices from StepSecurity (#10682)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-04-14 15:13:12 +02:00 |
|
|
Pepe Fagoaga
|
417be55604
|
feat(security): block mode for hardened runners (#10482)
|
2026-03-27 13:08:59 +01:00 |
|
|
stepsecurity-app[bot]andPepe Fagoaga
|
716c130140
|
feat(security): security best practices from StepSecurity (#10480)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-03-26 13:58:19 +01:00 |
|
|
Pepe Fagoaga
|
7adcbed727
|
fix(ci): zizmor security improvements (#10207)
|
2026-03-02 08:24:51 +01:00 |
|
|
Andoni Alonso
|
8be218b29f
|
fix(ci): harden GitHub Actions workflows against expression injection (#10200)
|
2026-03-01 19:58:43 +01:00 |
|
|
dependabot[bot]
|
deada62d66
|
build(deps): bump peter-evans/repository-dispatch from 4.0.0 to 4.0.1 (#9391)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-12-23 09:50:36 +01:00 |
|
|
César Arroba
|
f4a78d64f1
|
chore(github): bump version for API, UI and Docs (#9601)
|
2025-12-22 09:35:00 +01:00 |
|
|
César Arroba
|
6184de52d9
|
chore(github): fix pr merged action (#8988)
|
2025-10-22 18:05:31 +02:00 |
|
|
César Arroba
|
fdf45ea777
|
chore(github): improve pr merged action (#8987)
|
2025-10-22 17:52:00 +02:00 |
|