frankenphp
ci: harden CI per Astral's open-source security recommendations
#2347

Open

ci: harden CI per Astral's open-source security recommendations #2347

dunglas wants to merge 5 commits into php:main from dunglas:claude/astral-security-recommendations-cicf8

ci: harden CI per Astral's open-source security recommendations

14b4e4a3

ci: remove standalone zizmor workflow, fix SECURITY.md lint

f1b7bf97

ci: revert SECURITY.md, docker dependabot, and zizmor comments

340f3dba

ci: hash-pin all GitHub Actions and auto-merge Dependabot updates

5c34fea6

dunglas requested a review from

copilot-pull-request-reviewer 59 days ago

Delete zizmor.yaml

899cfb63

copilot-pull-request-reviewer commented on 2026-04-16

withinboredom commented on 2026-04-16

Reviewers

withinboredom

henderkes

Assignees

No one assigned

Labels

None yet

Milestone

No milestone