Skip to content

Add SECURITY.md, dependabot.yml, and pin actionlint#20

Merged
jeffwall-curlewlabs merged 0 commit into
mainfrom
repo-hygiene
Apr 9, 2026
Merged

Add SECURITY.md, dependabot.yml, and pin actionlint#20
jeffwall-curlewlabs merged 0 commit into
mainfrom
repo-hygiene

Conversation

@jeffwall-curlewlabs

Copy link
Copy Markdown
Contributor

Summary

  • Add SECURITY.md with vulnerability disclosure policy pointing to GitHub security advisories
  • Add .github/dependabot.yml for weekly github-actions dependency update PRs
  • Pin actionlint download to commit 914e7df2 (v1.7.12), matching local-mutex — was previously tracking main

Test plan

  • CI passes (actionlint still runs with the pinned version)

🤖 Generated with Claude Code

@jeffwall-curlewlabs jeffwall-curlewlabs merged this pull request into main Apr 9, 2026
5 checks passed
@jeffwall-curlewlabs jeffwall-curlewlabs deleted the repo-hygiene branch April 9, 2026 23:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant