Victor Zverovich 24ab1de71c Document why the SLSA generator is referenced by tag
Scorecard flags the tag as an unpinned dependency, but the generator
doesn't support being pinned by hash.
2026-11-07 09:34:40 -08:00
..
codeql.yml Bump github/codeql-action/init from 4.36.1 to 4.38.2 (#4966) 2026-10-01 08:47:57 -07:00
doc.yml Bump actions/checkout from 6.0.0 to 7.0.0 (#4835) 2026-07-01 09:07:12 -07:00
fuzz.yml Rename CIFuzz workflow to fuzz 2026-06-01 12:03:52 -07:00
lint.yml Bump actions/checkout from 6.0.0 to 7.0.0 (#4835) 2026-07-01 09:07:12 -07:00
linux.yml Cache packages in Linux CI 2026-10-16 16:02:06 -07:00
macos.yml ci: Replace the deprecated macos-14 runner with macos-15 2026-10-04 06:49:22 -07:00
release.yml Document why the SLSA generator is referenced by tag 2026-11-07 09:34:40 -08:00
supply-chain.yml Bump ossf/scorecard-action from 2.4.2 to 2.5.0 (#5008) 2026-11-01 07:52:04 -08:00
windows.yml Bump msys2/setup-msys2 from 2.28.0 to 2.32.0 (#4908) 2026-09-01 10:51:53 -07:00