Chris Lu 94d293b216 ci: pin every action in the jobs that sign ...

The jobs that hold the OIDC identity run these with registry credentials,
so a retargeted tag upstream must not reach them.

Claude-Session: https://claude.ai/code/session_01A5zMqzaUg1Snur4Yg8xJGa

2026-09-03 11:02:45 -07:00

..

actions

ci: pin the actions the signing jobs newly run by commit

2026-09-03 10:25:02 -07:00

workflows

ci: pin every action in the jobs that sign

2026-09-03 11:02:45 -07:00

dependabot.yml

ci: composite action that signs and verifies an image with cosign

2026-09-03 09:14:00 -07:00

FUNDING.yml

Update FUNDING.yml

2021-12-16 11:07:53 -08:00

ISSUE_TEMPLATE.md

move to https://github.com/seaweedfs/seaweedfs

2022-07-29 00:17:28 -07:00

pull_request_template.md

Modify AI review comments checklist in PR template

2026-02-09 08:58:35 -08:00