Spaces:
Running
Running
Commit History
-
Pin GitHub Actions to commit SHAs (#211) Running
hf-security-analysis[bot] +1: hf-security-analysis[bot]Unverified signatureA tag is mutable: whoever controls the action's repository can move `v4` to different code, and the next run picks it up with no diff to review. Pinning to the commit SHA freezes the code that runs today. Co-authored-by: hf-security-analysis[bot] <265538906+hf-security-analysis[bot]@users.noreply.github.com>f9642a1 -
Scope GITHUB_TOKEN permissions per job (#210)
hf-security-analysis[bot] +1: hf-security-analysis[bot]Unverified signatureA job with no `permissions:` block inherits whatever the repository hands out. Each block added here grants what that job's own steps need and nothing more. Co-authored-by: hf-security-analysis[bot] <265538906+hf-security-analysis[bot]@users.noreply.github.com>9359bed
-
🔒 pin update-conferences.yml actions to commit SHAs
Pauline Bailly-Massonbdd5644 -
🔒 pin claude-code-review.yml actions to commit SHAs
Pauline Bailly-Massondf2c87c
-
Add validate conferences Github action
f2f339a
-
"Claude Code Review workflow"
NielsRogge7aaa1cd -
"Claude PR Assistant workflow"
NielsRogge23fdb3a
-
Update action
4e8ce1a -
Add Github action
0868eda
-
Update permission
91222fd
-
Add Github action
bd501fe