Skip to content

Harden GitHub Actions workflows #225

Open
Open
Harden GitHub Actions workflows#225

Description

@ulgens
ulgens
opened on Aug 10, 2026

Parallel to processing/p5.js#9033, I believe all repos under processing organization needs the same base level of hardening for CI pipepilines.

The work will be done in multiple parts:

  • Initial pinning of existing dependencies - similar to Pin GHA dependencies p5.js#9032
  • Configuring an auto update mechanism, preferably with Renovate
  • Enforcing best practices with zizmor and applying the missing fixes

Activity

  1. ulgens
    added a commit that references this issue on Aug 10, 2026

    Pin GHA dependencies

    94148a2
  2. ulgens
    added a commit that references this issue on Sep 9, 2026

    Pin GHA dependencies

    d6d6ecd
  3. ulgens
    added a commit that references this issue on Sep 17, 2026

    Pin GHA dependencies

    6b1b377
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions