CI: Harden GHA configuration #11

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merged

ksunden merged 1 commit into matplotlib:main from tacaswell:harden_gha

Jul 18, 2025

+7 −0

Member

tacaswell commented Jul 18, 2025

Apply recommended hardening steps including:

pinning to a SHA any actions used
not persisting the read token on checkout
setting the default permissions
adding a depandabot file for GHA


          CI: add dependabot config file for GHA

98e19ad

github-actions bot commented Jul 18, 2025

👈 Launch a binder notebook on branch tacaswell/mpl-brochure-binder/harden_gha

ksunden merged commit 9258cf6 into matplotlib:main

1 check passed

tacaswell deleted the harden_gha branch

July 18, 2025 19:29

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet