fix(ci): GitHub Actions security hardening - #703

Open

stevebeattie wants to merge 7 commits into

wolfi-dev:mainfrom

stevebeattie:security/psec-923-actions

Commits on Jul 2, 2026

fix(ci): move template expressions out of run blocks into env
stevebeattie
committed
ae34a8d
fix(ci): set persist-credentials false on checkout steps
stevebeattie
committed
431f88b
fix(ci): suppress cosmetic zizmor rules and set dependabot cooldown
stevebeattie
committed
1d0389d
fix(ci): pass optional gcloud ACL flag as an array (SC2086)
stevebeattie
committed
7357dd2
fix(ci): quote $TMP and $GITHUB_PATH in install-wolfictl (SC2086)
stevebeattie
committed
d3df9cc
fix(ci): document benign github-env write in install-wolfictl (zizmor ignore)
stevebeattie
committed
75acbc6

Commits on Aug 6, 2026

Merge branch 'main' into security/psec-923-actions
stevebeattie
authored
059fef8