fix(lint): enforce SHA pinning for externals, warnings for internals#170

Merged

bedatty merged 7 commits intodevelopfrom

fix/pin-refs-v1.20.0-beta.1

Mar 25, 2026

Commits on Mar 25, 2026

fix(pr-validation): pin composite refs to v1.20.0-beta.1
bedatty
committed
fix(pinned-actions): accept pre-release versions for internal actions
bedatty
committed
fix(lint): enforce SHA pinning for external actions, suppress CodeQL unpinned-tag
bedatty
committed
feat(pr-lint-reporter): show warnings in collapsible section
bedatty
committed
fix(lint): pin actions/github-script by SHA in reporter composites
bedatty
committed
fix(codeql-config): exclude unpinned-tag query from CodeQL analysis
bedatty
committed
fix(pinned-actions): accept case-insensitive SHA hex
bedatty
committed