Evgeny Vereshchagin 5570313421 ci: pin labeler ... Turns out GHActions where `pull_request_target` is used are capable of pwning repositories: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ labeler doesn't check out the source code or build anything so it's safe in its current form but to avoid surprises let's just pin it to the latest version. It's annoying to manage dependencies like this manually so additionally dependabot.yml is introduced to make it easier to keep GHActions up to date more or less automatically: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/keeping-your-actions-up-to-date-with-dependabot		2021-11-11 10:19:06 +00:00
..
build_test.sh	ci: use the system llvm-11 package on Focal	2021-10-12 08:17:56 +02:00
build_test.yml	ci: cancel previous jobs on ref update	2021-11-10 17:15:35 +01:00
cifuzz.yml	ci: take CIFuzz's matrix into consideration	2021-11-10 20:44:24 +00:00
codeql-analysis.yml	ci: run codeql-analysis daily	2021-11-12 15:47:15 +00:00
coverity.yml	ci: use LGPLv2+ for all our ci configuration	2021-10-01 14:45:00 +02:00
labeler.yml	ci: pin labeler	2021-11-11 10:19:06 +00:00
linter.yml	ci: cancel previous jobs on ref update	2021-11-10 17:15:35 +01:00
mkosi.yml	ci: cancel previous jobs on ref update	2021-11-10 17:15:35 +01:00
test_mkosi_boot.py	ci: Detect shell prompt with higher specificity	2021-08-04 11:16:48 +02:00
unit_tests.sh	CI: disable code coverage in GH Action	2021-10-21 00:10:52 +01:00
unit_tests.yml	ci: cancel previous jobs on ref update	2021-11-10 17:15:35 +01:00