3 people 565995e715 security: harden CI against supply-chain attacks (#20476) ...

- Pin all third-party actions to SHA
- Gate claude.yml triggers to internal authors with Harden-Runner egress
audit
- Ignore fork-PR lifecycle scripts
- Narrow cross-repo dispatch payloads
- Add 7d npm release-age gate
- Add CODEOWNERS on .github/** and .yarnrc.yml

---------

Co-authored-by: prastoin <[email protected]>

2026-05-12 12:20:29 +00:00

..

cd-deploy-main.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

cd-deploy-tag.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

changed-files.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-ai-catalog-sync.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-breaking-changes.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-create-app-e2e-hello-world.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-create-app-e2e-minimal.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-create-app-e2e-postcard.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-create-app.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-docs.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-emails.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-example-app-hello-world.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-example-app-postcard.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-front-component-renderer.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-front.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-merge-queue.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-release-create.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-release-merge.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-sdk.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-server.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-shared.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-test-docker-compose.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-ui.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-utils.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-website.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

ci-zapier.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

claude.yml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

docs-i18n-pull.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

docs-i18n-push.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

external-contributor-pr-auto-draft.yaml

Fix auto draft workflow (#20357)

2026-05-07 14:57:17 +00:00

i18n-pull.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

i18n-push.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

post-ci-comments.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

pr-auto-review-dispatch.yaml

Simplify dispatch pr review (#20397)

2026-05-08 12:53:59 +02:00

preview-env-dispatch.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

preview-env-keepalive.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

visual-regression-dispatch.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

website-i18n-pull.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00

website-i18n-push.yaml

security: harden CI against supply-chain attacks (#20476)

2026-05-12 12:20:29 +00:00