Zohaib Hassnain 42afc06003 ci: refresh github/codeql-action pin to current v4 (#986) ...

The pin was 5595ccaf..., but upstream has since moved the v4 tag to
ff2f1c62.... The Verify Action Pins workflow flags this drift on every
PR that touches any workflow file, regardless of whether that PR
changed codeql.yml or defender-for-devops.yml.

Verified the new SHA against the GitHub API directly (not just the CI
error text) and confirmed .github/scripts/verify-action-pins.sh passes
clean locally (40/40 action references OK, exit 0).

2026-08-14 22:18:46 +05:00

..

codeql

security: fix 12 vulnerabilities across CRITICAL→LOW severity

2026-04-12 13:41:31 +05:30

DISCUSSION_TEMPLATE

docs: remove email addresses and add discussion templates

2025-12-03 11:19:07 +05:30

ISSUE_TEMPLATE

refactor: simplify .github folder and fix CI workflows

2025-11-25 23:31:33 +05:30

scripts

security: SHA-pin all Actions, harden release pipeline, add pin verification (#824)

2026-08-03 19:17:10 +05:30

workflows

ci: refresh github/codeql-action pin to current v4 (#986)

2026-08-14 22:18:46 +05:00

dependabot.yml

security: SHA-pin all Actions, harden release pipeline, add pin verification (#824)

2026-08-03 19:17:10 +05:30

FUNDING.yml

Add sponsor button configuration and update sponsorship section

2026-01-27 16:43:21 +05:30

pull_request_template.md

docs: link CONTRIBUTING.md issue workflow from PR template (#896)

2026-08-10 21:18:01 +05:30

SUPPORT.md

feat: add 105 real-world context graph tests + update Discord link (#365)

2026-03-10 00:00:44 +05:30