@aaronjmars 95a98b6747 fix(security): isolate workflow_dispatch input to avoid shell injection in attest-release (#223) ...

Security hardening: route workflow_dispatch input through env var to prevent shell injection in attest-release workflow.

2026-05-12 15:53:31 +02:00

..

attest-release.yml

fix(security): isolate workflow_dispatch input to avoid shell injection in attest-release (#223)

2026-05-12 15:53:31 +02:00

ci.yml

chore(deps): bump the actions group across 1 directory with 3 updates (#178)

2026-04-27 17:32:05 +02:00

publish.yml

chore(deps): bump sigstore/cosign-installer in the actions group (#214)

2026-05-11 20:55:41 +02:00