paskal / weblist / 22808129445

Builds	Branch	Commit	Type	Ran	Committer	Via	Coverage
22808129445	ci/workflow-hardening	ci: harden workflows, add fetch-depth: 0 for goreleaser goreleaser needs full git history for changelog generation and tag resolution. See https://goreleaser.com/ci/actions/	push	07 Mar 2026 10:02PM UTC	paskal	github	83.95
22806704903	ci/workflow-hardening	fix golangci-lint config: exclude new v2.11.1 rules	push	07 Mar 2026 08:33PM UTC	paskal	github	83.95
22596077368	fix/ci-security-hardening	pass step outputs via env: in manifest push steps steps.tags.outputs.* values derived from head_branch were still interpolated via ${{ }} in run: blocks. Now passed via env:.	push	02 Mar 2026 09:18PM UTC	paskal	github	83.95
22595700500	fix/ci-security-hardening	harden docker workflow against CI injection attacks - add permissions: contents: read, packages: write (least privilege) - add event == 'push' guard to prevent workflow_run firing on PR events - use env: mapping for head_branch instead of direct ...	push	02 Mar 2026 09:07PM UTC	paskal	github	83.95