Repository navigation

ci: harden GitHub Actions workflows against Scorecard and CodeQL alerts - #310

Merged

TheGupta2012 merged 7 commits into

mainfrom

ci/harden-workflows

Oct 26, 2026

Merged

ci: harden GitHub Actions workflows against Scorecard and CodeQL alerts#310
TheGupta2012 merged 7 commits into
mainfrom
ci/harden-workflows

Commits on Oct 26, 2026
- ci: pin every workflow action to a commit SHA
  
  TheGupta2012
  and
  claude
  committed
  7302f1f
- ci: declare least-privilege GITHUB_TOKEN permissions in every workflow
  
  TheGupta2012
  and
  claude
  committed
  2b23586
- ci: install workflow Python tools from hash-locked requirements
  
  TheGupta2012
  and
  claude
  committed
  e404a07
- ci(lab-env): install the qBraid CLI from a hash-locked requirements file
  
  TheGupta2012
  and
  claude
  committed
  3b546e4
- docs(changelog): note the workflow hardening
  
  TheGupta2012
  and
  claude
  committed
  ca818be
- ci: build with the hash-locked setuptools and wheel, without isolation
  
  TheGupta2012
  and
  claude
  committed
  e865fe2
- ci: compile the build lock from Python 3.10
  
  TheGupta2012
  and
  claude
  committed
  6e54774