maj00r c1c47f746e Harden the CI workflow ...

Actions pinned to full commits, no token left in the checkout, no binaries
from a fork's pull request among the artifacts, the version passed through the
environment, an audit of the NuGet packages, time limits, one release at a
time with checksums and never over another commit's release, and Dependabot
for the actions and packages.

2026-10-04 13:50:41 +02:00

391 B

Raw Blame History

View Raw