The GitHub Actions the edgeproc repos share instead of each hand-rolling: 7 reusable workflows + 5 composite actions for gates, secret scanning, dependency audit, OIDC publish to PyPI/npm, and Pages deploy. Every uses: is SHA-pinned; a scheduled job reports the 29 controls consumers still hand-roll.
devops ci-cd oidc pnpm uv github-actions gitleaks secret-scanning supply-chain-security cloudflare-pages npm-publishing pypi-publishing composite-actions reusable-workflows dependency-audit trusted-publishing sha-pinning
-
Updated
Oct 14, 2026 - Python