Commit Graph
4 Commits
Author SHA1 Message Date
volker.raschekandCopilot ee977a8610 fix(ci): pin actions to their commit sha
Floating tags let a compromised or force pushed release change what the workflows execute. Pinning the actions to a
commit sha and restricting the default token to read access limits the blast radius of a supply chain attack. The
outdated ansible-lint and markdownlint-cli2 versions are raised along with the pinning.

The ansible-lint run installs the collections of the molecule scenario, because the scenario is linted as well and
depends on community.docker beside the community.general requirement of the role.

Co-authored-by: Copilot <copilot@github.com>
2026-09-10 21:41:34 +02:00
volker.raschek 161d72089e fix(ci): add workflow dispatch for releases
Lint Markdown files / markdown-lint (push) Successful in 6s
Ansible Linter / ansible-lint (push) Successful in 55s
2026-01-11 21:16:09 +01:00
volker.raschek 58d25578d7 fix(ci): use dynamic github repository name
Ansible Linter / ansible-lint (push) Successful in 16s
Lint Markdown files / markdown-lint (push) Successful in 4s
2026-01-07 16:11:15 +01:00
volker.raschek 3af115d465 fix(ci): add release workflow
Ansible Linter / ansible-lint (push) Successful in 16s
Lint Markdown files / markdown-lint (push) Successful in 4s
2026-01-07 16:05:38 +01:00