Commit Graph
13 Commits
Author SHA1 Message Date
Etienne StalmansandAli Waseem c9cc6cd835 chore: cleanup gh actions (#46454)
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md)
file.

YES

## What kind of change does this PR introduce?

Chore, CI hardening


## Additional context

Hardens all GitHub actions to recommendations of
[zizmor](https://docs.zizmor.sh/audits/)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Chores**
* Disabled persistence of checkout credentials across many CI workflows
to reduce credential exposure.
* Upgraded GitHub App token tooling and tightened generated token
permissions for automation.
* Added cooldown/rate-limiting to dependency update automation to reduce
update churn.
* Adjusted workflow-level permissions, required secret inputs for
workflow callers, and refactored some job step logic.

<!-- review_stack_entry_start -->

[![Review Change
Stack](https://storage.googleapis.com/coderabbit_public_assets/review-stack-in-coderabbit-ui.svg)](https://app.coderabbit.ai/change-stack/supabase/supabase/pull/46454?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)

<!-- review_stack_entry_end -->
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: Ali Waseem <waseema393@gmail.com>
2026-05-28 17:31:04 +02:00
Charis 3973cc3e5c chore: update github workflows (#39237) 2025-10-20 09:36:45 -04:00
Stephen Morgan 431be5682b fix: review actions (#34648)
* fix: possible command injection in docs-lint

* fix: explicit permissions for github actions
2025-04-02 16:41:14 +13:00
Kevin Grüneberg c1330d35c0 ci: fix autofix (#34332) 2025-03-22 15:51:01 +01:00
Greg Richardson 030ef17bf1 chore(embeddings): github action poc 2023-04-24 10:40:37 -06:00
Isaiah Hamilton 8bc47dc3a6 update path 2023-03-07 18:34:18 -05:00
Han Qiao 654c55a9cc Fix workflow for deploying og image 2023-03-07 17:00:12 +08:00
Qiao Han 4cb4a30198 fix: og image deploy workflow 2023-03-03 12:59:31 +08:00
Isaiah Hamilton cce7fdf003 update og image github action 2023-02-26 01:03:15 -05:00
Isaiah Hamilton 707d970b4a name steps 2023-02-14 20:50:03 -05:00
Isaiah Hamilton 7916c88a3b Update og_images.yml 2023-01-23 20:51:34 -05:00
Isaiah Hamilton 4d06272487 update action name 2023-01-23 20:05:11 -05:00
Isaiah Hamilton 5a55bb0ca2 auto deploy og image 2023-01-23 20:02:05 -05:00