7 Commits (d80af8bf10bca16341b0cec23ef6fe7bc8f89260)

Author	SHA1	Message	Date
dependabot[bot]	47860a93c2	chore(deps): bump actions/checkout from 3.5.3 to 3.6.0 ... Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.3 to 3.6.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](c85c95e3d7...f43a0e5ff2) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
dependabot[bot]	4eccb7db0e	chore(deps): bump actions/checkout from 3.5.2 to 3.5.3 ... Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.2 to 3.5.3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](8e5e7e5ab8...c85c95e3d7) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
Gabriela Gutierrez	404301103d	Ref actions by commit SHA in shellcheck.yml ... It's important to make sure the SHA's are from the original repositories and not forks. For reference: https://github.com/actions/checkout/releases/tag/v3.5.2 8e5e7e5ab8 https://github.com/ludeeus/action-shellcheck/releases/tag/2.0.0 00cae500b0 Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com>	2 years ago
nathannaveen	3a2c8dd4f8	chore: Set permissions for GitHub actions ... Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs [Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/) Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com>	3 years ago
dependabot[bot]	aa9aca7d12	Bump actions/checkout from 2 to 3 ... Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
shirou	92aa11e80a	use ludeeus/action-shellcheck for shellcheck.	4 years ago
Lomanic	b0b7969cbf	[ci] Implement automatic shellcheck test on GH Actions	4 years ago