search

Edirom / Edirom-Online

Edirom Online is a tool for presenting historical-critical music editions in digital form.
GNU General Public License v3.0
19 stars 18 forks source link

ci(gh-actions): harden actions #376

Closed musicEnfanthen closed 1 month ago

musicEnfanthen commented 1 month ago

This PR adds some best practice security hardenings to the repo's actions workflows. This includes referencing commit shas of the used action versions and setting minimal permissions.

musicEnfanthen commented 1 month ago

Cannot request reviewers, so pinging @roewenstrunk and @bwbohl

bwbohl commented 1 month ago

many thanks for this ;-)