Sam James 35f8649f08 ci: don't pin official GH actions via commit, just tag ... There's no real value in doing it via commit for official GH actions. We can keep using pinned commits for unofficial actions. It's hassle for no gain. Maybe going forward we can limit this further by only being paranoid for the jobs with any access to tokens.		2024-06-03 12:32:34 +03:00
..
workflows	ci: don't pin official GH actions via commit, just tag	2024-06-03 12:32:34 +03:00
SECURITY.md	Update SECURITY.md.	2024-04-09 21:55:01 +03:00