chore(ci): harden workflows and bump packageManager to pnpm@11.1.1 - #451

Closed

AlemTuzlak wants to merge 1 commit into

Annotations

6 errors, 2 warnings, and 3 notices

Process completed with exit code 14.

release.yml:33: unpinned action reference: action is not pinned to a hash (required by blanket policy)

pr.yml:58: unpinned action reference: action is not pinned to a hash (required by blanket policy)

pr.yml:28: unpinned action reference: action is not pinned to a hash (required by blanket policy)

e2e-opportunistic-matrix.yml:43: unpinned action reference: action is not pinned to a hash (required by blanket policy)

check-skills.yml:113: code injection via template expansion: may expand into attacker-controllable code

release.yml:28: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false

check-skills.yml:29: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false

release.yml:64: code injection via template expansion: may expand into attacker-controllable code

check-skills.yml:138: code injection via template expansion: may expand into attacker-controllable code

check-skills.yml:129: code injection via template expansion: may expand into attacker-controllable code