chore: pin GitHub Actions to SHA for supply chain security#1

Closed

luis-hong wants to merge 12 commits intomainfrom

chore/pin-github-actions-sha

Commits on Feb 20, 2026

chore: pin GitHub Actions to SHA (.github/workflows/enforce-license-compliance.yml)
luis-hong
committed
chore: pin GitHub Actions to SHA (.github/workflows/integration-tests-benchmarks.yml)
luis-hong
committed
chore: pin GitHub Actions to SHA (.github/workflows/release.yml)
luis-hong
committed

Commits on Feb 23, 2026

chore: add security-check workflow for SHA pinning CI
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/build.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/codeql-analysis.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/format-code.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/generate-javadocs.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/gradle-wrapper-validation.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/integration-tests-benchmarks.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/integration-tests-ui.yml)
luis-hong
committed
chore: pin OFFICIAL, VERIFIED_CLOUD actions to SHA (.github/workflows/release.yml)
luis-hong
committed