Repository navigation

Security hardening: pinned actions, workflow permissions, .env, SECURITY.md - #1

Open

RARS-oss wants to merge 4 commits into

mainfrom

security/hardening

Open

Security hardening: pinned actions, workflow permissions, .env, SECURITY.md#1
RARS-oss wants to merge 4 commits into
mainfrom
security/hardening

Commits on Sep 11, 2026
- Security hardening: pin actions, least-privilege workflow permissions, ignore .env, SECURITY.md
  
  RARS-oss
  and
  claude
  committed
  ba7d185
- cargo fmt: formatting only (fixes the failing fmt check on main)
  
  RARS-oss
  and
  claude
  committed
  eb9fc01
- CI: commit the two documented test keys, fix clippy under -D warnings
  
  RARS-oss
  and
  claude
  committed
  2a549ba
- CI: pass the pinned test pubkey to the stdlib receipt verifier
  
  RARS-oss
  and
  claude
  committed
  cf3664a