ci: Pin GitHub Actions to immutable commit SHAs

4f0e783

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

Onboarding Smoke Test on: pull_request 2

start.sh shell smoke

Fresh-clone smoke test (Ubuntu)

SecuScan CI on: pull_request 35

detect-changes

issue-template-label-validation

doc-anchor-validation

backend-audit

formatting-hygiene

backend-lint

frontend-run-checks (20)

frontend-run-checks (22)

backend-unit

backend-integration

parser-contracts (network)

parser-contracts (intrusive)

parser-contracts (credentials)

parser-contracts (exploit)

benchmark

frontend-checks

backend-tests

Plugin Catalog Sync Check on: pull_request 1

validate-catalog

Check for Committed Artifacts on: pull_request 1

artifact-check

Security CI/CD on: pull_request 6

Python Security Linting (Bandit)

Route Authentication Check

Debug Mode Default Check

Hardcoded Secret Detection

Environment Config Validation

Dependency Security Audit

Trivy Vulnerability Scan on: pull_request 7

Build backend image

Build frontend image

Synthetic CVE policy gate test

Trivy scan - backend

Trivy scan - frontend

Docker Hardening Checks on: pull_request 5

Build backend image

Build frontend image

Hardening checks – backend

Hardening checks – frontend

Code scanning results

Trivy

GitHub Advanced Security / Trivy succeeded Aug 2, 2026 in 2s

No new alerts in code changed by this pull request

View all branch alerts.

Loading

Re-running checks...