Harden repository configuration - #403

Merged

StevenMaude merged 8 commits into

mainfrom

steve/harden-repository-configuration

Jul 28, 2026

Commits on Jul 23, 2026

Pin GitHub Actions
StevenMaude
committed
f431536
Set `persist-credentials: false` on checkout
StevenMaude
committed
52779f8
Set permissions on workflows
StevenMaude
committed
dfd61a8
Set cooldown for Dependabot with `uv`
StevenMaude
committed
648887c
Set `uv` version update schedule for consistency
StevenMaude
committed
22fdaa4
Add a Dependabot check for Docker
StevenMaude
committed
1fba56d
Add a pre-commit Dependabot check
StevenMaude
committed
948fafd
Pin actionlint image
StevenMaude
committed
3fbd2ce