ci(gh-actions): harden actions

music-encoding / docker-mei

This repo offers an docker image containing all software needed for building the mei guidelines

MIT License

0 stars 5 forks source link

ci(gh-actions): harden actions #30

Closed musicEnfanthen closed 4 months ago

musicEnfanthen commented 6 months ago

This PR adds some best practice security hardenings to the repo's actions workflows. This includes referencing commit shas of the used action versions, setting minimal permissions and automatic dependency updates.