Chris Lu 0d3aebbcbe ci: pin the actions the signing jobs newly run by commit ...

These run with registry credentials and the OIDC token that signs under
the repository's identity, so a retargeted tag upstream must not be able
to reach them.

Claude-Session: https://claude.ai/code/session_01A5zMqzaUg1Snur4Yg8xJGa

2026-09-03 10:25:02 -07:00

..

actions

ci: pin the actions the signing jobs newly run by commit

2026-09-03 10:25:02 -07:00

workflows

ci: pin the actions the signing jobs newly run by commit

2026-09-03 10:25:02 -07:00

dependabot.yml

ci: composite action that signs and verifies an image with cosign

2026-09-03 09:14:00 -07:00

FUNDING.yml

Update FUNDING.yml

2021-12-16 11:07:53 -08:00

ISSUE_TEMPLATE.md

move to https://github.com/seaweedfs/seaweedfs

2022-07-29 00:17:28 -07:00

pull_request_template.md

Modify AI review comments checklist in PR template

2026-02-09 08:58:35 -08:00