Willi Ballenthin 5f627d4252 ci: pin actions to latest stable SHAs and narrow permissions in test workflow ...

zizmor flagged unpinned action references and overly broad read-all
permissions. Pin all actions to their latest stable release commit SHAs
(checkout v7.0.1, setup-python v7.0.0, setup-uv v10.1.0) and scope
permissions to contents:read per job.

2026-09-15 11:21:52 +01:00

..

workflows

ci: pin actions to latest stable SHAs and narrow permissions in test workflow

2026-09-15 11:21:52 +01:00