ci: harden workflows with pinned actions, timeouts, and concurrency controls#1412

Open

niStee wants to merge 10 commits intotopgrade-rs:mainfrom

Commits on Nov 15, 2025

ci: add CodeQL and cargo-deny workflows with pinned SHAs
Topgrade Tester
committed
ci: harden workflows with timeouts, concurrency, fetch-depth, and modern cross install
Topgrade Tester
committed
ci(release): add timeouts and shallow checkout to create_release_assets (native,cross)
Topgrade Tester
committed
ci: document action pin commands in workflows (checkout, codeql, rust-cache, install-action)
Topgrade Tester
committed
ci(cargo-deny): make checks non-blocking
Topgrade Tester
committed

Commits on Nov 16, 2025

refactor: remove redundant fetch-depth from workflows
Topgrade Tester
committed
refactor: split PR - remove new workflows for separate PR
Topgrade Tester
committed
refactor: remove last fetch-depth from release_to_pypi.yml
Topgrade Tester
committed
docs: remove CodeQL badge (workflow moved to separate PR)
Topgrade Tester
committed
Merge branch 'main' into pr-1310
niStee
authored