This repository was archived by the owner on May 29, 2026. It is now read-only.

ci: harden dependabot workflows + switch CodeQL to advanced setup - #59

Merged

LiukScot merged 5 commits into

mainfrom

fix/dependabot-workflows-hardening

May 24, 2026

Commits on May 24, 2026

docs(agents): require new CI gates to be added to required checks

LiukScot
and
claude
committed
6bac54e
ci: switch CodeQL from default to advanced setup

LiukScot
and
claude
committed
084196a
ci: pin checkout SHA + AGENTS.md trailing period

LiukScot
and
claude
committed
aad6637
ci(codeql): pin codeql-action to SHA + disable checkout creds

LiukScot
and
claude
committed
f02b9e0
ci(codeql): revert SHA pin to v3 tag per AGENTS.md §14

LiukScot
and
claude
committed
460c5b6