Skip to content

ci: lock spelling dependencies and disable checkout credentials - #234

Draft
somethingwithproof wants to merge 1 commit into
developfrom
security/actions-hardening-20261013
Draft

somethingwithproof wants to merge 1 commit into
developfrom
security/actions-hardening-20261013

Conversation

@somethingwithproof

Copy link
Copy Markdown
Member

Disable persisted checkout credentials, set a 15-minute job timeout, and install codespell from a hash-locked requirements file. Add weekly grouped Python dependency updates. The spelling configuration and check name stay intact.

Validation: full actionlint passes. GitHub spelling check still needs to complete.

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant