4 Commits

Author	SHA1	Message	Date
kingchenc	05d2e5dc61	ci(scorecard): pass a read-only PAT for the Branch-Protection check (#168) ... Pass a read-only fine-grained PAT (SCORECARD_TOKEN) as repo_token so the OpenSSF Scorecard Branch-Protection check can read classic branch-protection rules instead of failing with an internal error.	2026-06-03 22:51:28 +02:00
kingchenc	433b06367f	ci: bump actions/checkout v4.3.1 -> v6.0.2 in codeql & scorecard (#124)	2026-06-01 20:24:20 +02:00
kingchenc	0fa70c9882	ci: pin remaining GitHub Actions to commit SHAs (P21.1c) (#100)	2026-06-01 01:07:34 +02:00
kingchenc	c8e5d8a658	ci: add OpenSSF Scorecard workflow + badge (P13.1) (#90)	2026-05-31 22:05:00 +02:00