Skip to content

Harden CI and release supply chain - #7

Merged
yuriizee merged 1 commit into
mainfrom
harden-github-settings
Oct 16, 2026
Merged

yuriizee merged 1 commit into
mainfrom
harden-github-settings

Conversation

@yuriizee

Copy link
Copy Markdown
Contributor
  • Pin every action to a commit SHA
  • Read-only GITHUB_TOKEN by default in Tests and Security
  • Run Composer Audit on pull requests
  • Dependabot for GitHub Actions, CODEOWNERS
  • Release workflow: source archive, CycloneDX SBOM, build provenance and SBOM attestations
  • SECURITY.md: 2.x supported, private vulnerability reporting, release verification

@yuriizee
yuriizee merged commit 7ce77e0 into main Oct 16, 2026
4 checks passed
@yuriizee
yuriizee deleted the harden-github-settings branch October 16, 2026 08:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant