CI: Harden GHA configuration #83

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merged

ksunden merged 1 commit into matplotlib:main from tacaswell:harden_gha

Jul 18, 2025

Member

tacaswell commented Jul 18, 2025

Apply recommended hardening steps including:

pinning to a SHA any actions used
not persisting the read token on checkout
setting the default permissions
adding a depandabot file for GHA


          CI: add dependabot config file for GHA

43c0511

ksunden approved these changes

View reviewed changes

ksunden merged commit b1f559f into matplotlib:main

tacaswell deleted the harden_gha branch

July 18, 2025 19:29

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet