security: harden github actions - #53

Closed

m1rm wants to merge 11 commits into

archlinux-de:mainfrom

m1rm:security/harden-github-actions

Commits on Jun 21, 2026

security: harden github actions
m1rm
committed
ab9a4f3
pass maintenance token to update job so the bot can commit
m1rm
committed
2a177cb
Update justfile build recipe bc. of GH actions hardening
m1rm
committed
045d287
Update test.yml bc. of GH actions hardening
m1rm
committed
04083a1
Update Dockerfile; accept version env var
m1rm
committed
f140387
Update justfile regarding VERSION env var changes in Dockerfile
m1rm
committed
3a041da
Update dev.just regarding VERSION env var changes
m1rm
committed
1f4af09
update lint action to latest
m1rm
committed
9d4b1db
refactor: avoid global version plumbing; Docker build gets version via .dockerignore and build-arg instead of copying .git or relying on checkout credentials
m1rm
committed
90716fc
maintenance: update other action checkouts to latest, too
m1rm
committed
f99af8c
refactor: git describe --tags only fails on fork
m1rm
committed
d43377f