chore: group dependencies and change action tags to SHAs

github-community-projects / org-metrics-dashboard

An actions-powered dashboard to get an overview of your organization's open source repository health

MIT License

68 stars 21 forks source link

Closed jmeridth closed 5 months ago

jmeridth commented 5 months ago

[x] group dependecies for minor/patch updates to reduce PRs
- keep major dependency updates to own PRs for visility and testing
[x] change workflows to use SHAs instead of tags to security supply chain
[x] drop codeql workflow since we're not doing anything custom, changed settings in repo to use default codeql runs