CI: Harden GHA configuration#85

Merged

mfisher87 merged 9 commits into

matplotlib:mainfrom

tacaswell:harden_gha

Jun 2, 2026

Commits on Jun 2, 2026

CI: pin actions by SHA

tacaswell
authored and
mfisher87
committed
CI: auto-fix via zizmor

tacaswell
authored and
mfisher87
committed
CI: Restrict default permissions

tacaswell
authored and
mfisher87
committed
CI: add dependabot config file for GHA

tacaswell
authored and
mfisher87
committed
Add dependabot cooldown
mfisher87
committed
Switch to monthly frequency, remove comments
mfisher87
committed
Add zizmor security auditing
mfisher87
committed
Resolve security advisory for vulnerable action
mfisher87
committed
Consistent use of quotes
mfisher87
committed