David Karlsson 00aefd5eae chore: pin GitHub Actions to full commit SHA; lock npm exact versions ...

All mutable action tags replaced with verified commit SHAs to prevent
supply-chain attacks via tag mutation. package.json ^ ranges replaced
with exact versions from package-lock.json.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-24 17:16:06 +01:00

4.4 KiB

Raw Permalink Blame History

View Raw