Daniel Hast 3572bf7e16 ci: eliminate template expansion in code contexts ...

Replace all template expansions in code contexts with environment
variable substitutions. Template expansion in code contexts can be a
source of code injection vulnerabilities; for more info, see:
https://docs.zizmor.sh/audits/#template-injection

2026-03-09 21:40:39 -04:00

..

actions

ci: eliminate template expansion in code contexts

2026-03-09 21:40:39 -04:00

ISSUE_TEMPLATE

Revert "docs(gh): replace gitter with discussion link"

2026-01-11 12:09:04 +01:00

scripts

ci(deps): don't brew install ninja on macOS

2026-02-18 19:39:31 +01:00

workflows

ci: eliminate template expansion in code contexts

2026-03-09 21:40:39 -04:00

dependabot.yml

ci: pin third-party action dependencies to commit hashes

2026-03-09 21:36:20 -04:00

FUNDING.yml

funding: Bountysource Salt -> GitHub Sponsors & Open Collective [ci skip] (#12959)

2020-09-21 20:47:02 +02:00

pull_request_template.md

docs: add sections to PR template (#37495)

2026-01-23 13:28:09 -08:00

SECURITY.md

docs: add security policy (#17338)

2022-12-22 13:20:19 +01:00

zizmor.yml

ci: pin third-party action dependencies to commit hashes

2026-03-09 21:36:20 -04:00