build(deps): bump actions/checkout from 4.2.2 to 7.0.1 - #3

Closed

dependabot[bot] wants to merge 59 commits into

mainfrom

dependabot/github_actions/actions/checkout-7.0.1

Commits on Aug 12, 2026

Add Scorecard workflow for supply-chain security
RodolpheKouyoumdjian
authored
6d3489c
ci: pin all GitHub Actions to commit SHAs

RodolpheKouyoumdjian
and
claude
committed
bead2ff
ci: scope release/self-test permissions to the job, not the workflow

RodolpheKouyoumdjian
and
claude
committed
bbc12ab
fix: pin the eval fixture Dockerfile's base image by digest

RodolpheKouyoumdjian
and
claude
committed
f638c63
feat(config): add codeScanning and outdated scan settings

RodolpheKouyoumdjian
and
claude
committed
dc817d3
feat: build SARIF findings from Drift's plans, one per package

RodolpheKouyoumdjian
and
claude
committed
1fe4f9d
feat(github): upload SARIF results to code scanning

RodolpheKouyoumdjian
and
claude
committed
34e92a5
feat(action): upload code scanning alerts; add outdated-scan mode

RodolpheKouyoumdjian
and
claude
committed
31c86ed
docs(workflows): document code scanning; add outdated-scan example

RodolpheKouyoumdjian
and
claude
committed
cee7ac0
ci: dogfood code scanning and the outdated scan on Drift itself

RodolpheKouyoumdjian
and
claude
committed
4c990e0
docs: add OpenSSF Scorecard badge and code scanning section to README

RodolpheKouyoumdjian
and
claude
committed
068758f
Merge feat/code-scanning-alerts: GitHub code scanning alerts + OpenSSF badge

RodolpheKouyoumdjian
and
claude
committed
8b02309
fix: alert one per breaking change, not per package

RodolpheKouyoumdjian
and
claude
committed
f610ab9
chore(action): reword code-scanning log/summary text; rebuild bundle

RodolpheKouyoumdjian
and
claude
committed
d6c2cb8
docs: update code-scanning docs for per-breaking-change alerts

RodolpheKouyoumdjian
and
claude
committed
330e4c4
ci: consolidate outdated-scan dogfooding into drift-selftest.yml

RodolpheKouyoumdjian
and
claude
committed
2ecb79d
Merge fix/sarif-per-breaking-change: alert per breaking change, not package

RodolpheKouyoumdjian
and
claude
committed
9034936
fix: revert to one code-scanning alert per package

RodolpheKouyoumdjian
and
claude
committed
1532b0f
chore(action): revert code-scanning comment to per-package wording; rebuild bundle

RodolpheKouyoumdjian
and
claude
committed
694696f
docs: revert code-scanning docs to per-package alerts; note rescan behavior

RodolpheKouyoumdjian
and
claude
committed
a477d97
Merge fix/one-alert-per-package: revert to one alert per package

RodolpheKouyoumdjian
and
claude
committed
5147e6a
fix(sarif): one code-scanning alert per locally-actionable finding, not per package
RodolpheKouyoumdjian
committed
6d4685c
fix(localize): require receiver provenance for member-access matches
RodolpheKouyoumdjian
committed
b04b0ea
chore(security): add CodeQL SAST and Dependabot for OpenSSF Scorecard
RodolpheKouyoumdjian
committed
8fbfee3
fix(sarif): group alerts per package with markdown rendering and links

RodolpheKouyoumdjian
and
claude
committed
ef66a63
feat(scan): check dev/optional/peer dependencies by default

RodolpheKouyoumdjian
and
claude
committed
2edee72
Update default scan-mode to 'outdated'
RodolpheKouyoumdjian
authored
fbf5cca
Updated action
RodolpheKouyoumdjian
committed
6ee85ee
Auto run npm run build:action when action code is updated
RodolpheKouyoumdjian
committed
f4d0fd9
fix(sarif): restructure alert body formatting; harden token permissions and add fuzzing

RodolpheKouyoumdjian
and
claude
committed
8913c12
fix(sarif): render every location as an inline snippet, and surface actual before/after evidence

RodolpheKouyoumdjian
and
claude
committed
44184c2

Commits on Aug 13, 2026