Skip to content

ci: lock spelling dependencies and disable checkout credentials - #234

Merged
TheWitness merged 3 commits into
developfrom
security/actions-hardening-20261013
Oct 20, 2026
Merged

TheWitness merged 3 commits into
developfrom
security/actions-hardening-20261013

Conversation

@somethingwithproof

Copy link
Copy Markdown
Member

Disable persisted checkout credentials, set a 15-minute job timeout, and install codespell from a hash-locked requirements file. Add weekly grouped Python dependency updates. The spelling configuration and check name stay intact.

Validation: full actionlint passes. GitHub spelling check still needs to complete.

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
Comment thread .github/workflows/spelling.yml Fixed
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
@sonarqubecloud

Copy link
Copy Markdown

@somethingwithproof
somethingwithproof marked this pull request as ready for review October 17, 2026 23:49
@TheWitness
TheWitness merged commit 581f2f2 into develop Oct 20, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants