gaebal-gajae 57f11ddbed ci: pin all third-party GitHub Actions to immutable commit SHAs ...

- actions/checkout: v4 → 11d5960a326750d5838078e36cf38b85af677262
- actions/setup-python: v5 → a26af69be951a213d495a4c3e4e4022e16d87065
- actions/upload-artifact: v4 → ea165f8d65b6e75b540449e92b4886f43607fa02
- dtolnay/rust-toolchain: stable → 686976e191b89faba57d3206551f0f330d8cb249
- Swatinem/rust-cache: v2 → 49a0bdc70d2e1b713ca9e2869b211fcce03d3c1c
- softprops/action-gh-release: v2 → 3bb12739c298aeb8a4eeaf626c5b8d85266b0e65

Improves supply chain security by pinning Actions to specific commits
instead of mutable tag references, preventing unexpected behavior changes
if action maintainers update tags.

Fixes #3287

2026-10-12 22:05:06 +00:00

..

hooks

fix: keep hooks clean and close bash stdin

2026-06-03 20:20:04 +09:00

ISSUE_TEMPLATE

omx(team): auto-checkpoint worker-3 [6]

2026-05-15 11:41:03 +09:00

scripts

Ensure release docs are auditable before Windows adoption

2026-05-15 10:52:43 +09:00

workflows

ci: pin all third-party GitHub Actions to immutable commit SHAs

2026-10-12 22:05:06 +00:00

FUNDING.yml

Refresh docs to match ultraworkers/claw-code source of truth

2026-04-05 18:11:25 +00:00

PULL_REQUEST_TEMPLATE.md

Gate issue and PR triage on evidence

2026-05-15 11:49:08 +09:00