12 Commits

Author	SHA1	Message	Date
bashonly	a65349443b	[cleanup] Misc (#15430) ... Authored by: bashonly, Grub4K, seproDev Co-authored-by: sepro <sepro@sepr0.com> Co-authored-by: Simon Sawicki <contact@grub4k.dev>	2026-01-29 16:22:35 +00:00
bashonly	ab3ff2d5dd	[build] Harden CI/CD pipeline (#15387) ... * NOTE: the release workflows' new handling of secrets may be a breaking change for forks that are using any secrets other than GPG_SIGNING_KEY or ARCHIVE_REPO_TOKEN. Previously, the release workflow would try to resolve a token secret name based on the `target` or `source` input, e.g. NIGHTLY_ARCHIVE_REPO_TOKEN or CUSTOM_ARCHIVE_REPO_TOKEN, and then fall back to using the ARCHIVE_REPO_TOKEN secret if the resolved token secret name was not found in the repository. This behavior has been replaced by the release workflow always using the ARCHIVE_REPO_TOKEN secret as the token for publishing releases to any external archive repository. * Add zizmor CI job for auditing workflows * Pin all actions to commit hashes instead of symbolic references * Explicitly set GITHUB_TOKEN permissions at the job level * Use actions/checkout with `persist-credentials: false` whenever possible * Remove/replace template expansions in workflow scripts * Remove all usage of actions/cache from build/release workflows * Remove the cache-warmer.yml workflow * Remove the unused download.yml workflow * Set concurrency limits for any workflows that are triggered by PRs * Avoid loading the entire secrets context * Replace usage of `secrets: inherit` with explicit `secrets:` blocks * Pin all external docker images to hash that are used by the build workflow * Explicitly set `shell: bash` for some steps to avoid pwsh or set pipefail * Ensure any pwsh steps will fail on non-zero exit codes Authored by: bashonly	2025-12-30 21:05:10 +00:00
bashonly	a6a8f6b6d6	[ci] Explicitly declare permissions and limit credentials (#15324) ... Authored by: bashonly	2025-12-19 19:22:23 +00:00
bashonly	7a52ff29d8	[cleanup] Misc (#15016) ... Closes #15160, Closes #15184 Authored by: bashonly, seproDev, RezSat, oxyzenQ Co-authored-by: sepro <sepro@sepr0.com> Co-authored-by: Yehan Wasura <yehantest@gmail.com> Co-authored-by: rezky_nightky <with.rezky@gmail.com>	2025-12-07 23:58:34 +00:00
bashonly	29fe515d8d	[devscripts] install_deps: Align options/terms with PEP 735 (#15200) ... Authored by: bashonly	2025-12-07 23:39:05 +00:00
bashonly	335653be82	[cleanup] Misc (#14965) ... Closes #14789 Authored by: bashonly, seproDev Co-authored-by: sepro <sepro@sepr0.com>	2025-11-12 00:47:33 +00:00
bashonly	73922e66e4	[devscripts] Improve install_deps script (#14766) ... Authored by: bashonly	2025-10-25 22:47:00 +00:00
sepro	c7bda2192a	[cleanup] Misc (#14594) ... Authored by: seproDev, bashonly Co-authored-by: bashonly <88596187+bashonly@users.noreply.github.com>	2025-10-15 11:16:50 +00:00
bashonly	2e81e298cd	[cleanup] Misc (#14268) ... Closes #13427 Authored by: bashonly, seproDev, doe1080 Co-authored-by: sepro <sepro@sepr0.com> Co-authored-by: doe1080 <98906116+doe1080@users.noreply.github.com>	2025-09-23 06:33:30 +00:00
bashonly	ae3923b6b2	[ci] Improve workflow checks (#14316) ... Authored by: bashonly	2025-09-13 21:55:35 +00:00
bashonly	22ea0688ed	[ci] Bump actions/setup-python to v6 (#14282) ... Authored by: bashonly	2025-09-10 21:29:12 +00:00
bashonly	7c9b10ebc8	[ci] Test and lint workflows (#14249) ... Authored by: bashonly	2025-09-06 22:28:11 +00:00