 Etienne StalmansandAli Waseem
|
c9cc6cd835
|
chore: cleanup gh actions (#46454)
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md)
file.
YES
## What kind of change does this PR introduce?
Chore, CI hardening
## Additional context
Hardens all GitHub actions to recommendations of
[zizmor](https://docs.zizmor.sh/audits/)
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Chores**
* Disabled persistence of checkout credentials across many CI workflows
to reduce credential exposure.
* Upgraded GitHub App token tooling and tightened generated token
permissions for automation.
* Added cooldown/rate-limiting to dependency update automation to reduce
update churn.
* Adjusted workflow-level permissions, required secret inputs for
workflow callers, and refactored some job step logic.
<!-- review_stack_entry_start -->
[](https://app.coderabbit.ai/change-stack/supabase/supabase/pull/46454?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)
<!-- review_stack_entry_end -->
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: Ali Waseem <waseema393@gmail.com>
|
2026-05-28 17:31:04 +02:00 |
|
|
Katerina Skroumpelou
|
8c367d0c86
|
ci: use github app generated token (#41767)
* ci: use github app generated token
* ci: pin action to commit sha
|
2026-01-07 13:27:04 +00:00 |
|
|
Etienne Stalmans
|
346fccec85
|
chore: cleaner action gh tokens (#41196)
|
2025-12-09 15:54:40 +01:00 |
|
|
Katerina Skroumpelou
|
ce1cf19b51
|
ci: add contents-write to fix-typos (#40869)
|
2025-11-27 14:32:31 +00:00 |
|
|
Charis
|
3973cc3e5c
|
chore: update github workflows (#39237)
|
2025-10-20 09:36:45 -04:00 |
|
|
Stephen Morgan
|
431be5682b
|
fix: review actions (#34648)
* fix: possible command injection in docs-lint
* fix: explicit permissions for github actions
|
2025-04-02 16:41:14 +13:00 |
|
|
Kevin Grüneberg
|
dd626768fd
|
build: improve build times
|
2023-09-13 23:39:06 +02:00 |
|
|
Francisco Mazzoni
|
039801b945
|
update create-pull-request github action for fix-typos action
|
2022-11-10 10:26:09 -03:00 |
|
|
Sara Tavaresandgithub-actions[bot]
|
80d0624262
|
fix(typos): add github action to prevent typos + fix typos (#9598)
* feat(ci): fix typos
* [create-pull-request] automated change
* Update index.tsx
* Update README.fr.md
* Create .misspell-fixer.ignore
* Update constant.dart
* [create-pull-request] automated change
* Update database.tsx
* [create-pull-request] automated change
* [create-pull-request] automated change
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2022-10-27 23:32:02 -03:00 |
|
