TriplEight 59d1f3b854 ci: replace unsecured curl hadolint download with an official action ... hadolint/hadolint-action uses a Docker-based runner with hadolint pre-bundled in ghcr.io/hadolint/hadolint:v2.14.0-debian,so no binary downloaded at runtime. Pinning the action to a commit SHA covers the Dockerfile that specifies the image version, closing the supply-chain gap from the previous unverified curl | sudo install. Split {debian,alpine}: the action takes a single dockerfile argument, so debian and alpine are linted separately.		2026-03-22 14:26:25 +01:00
..
ISSUE_TEMPLATE	Adjust issue template to hopefully show better to search for closed and open issues (#6096)	2025-07-25 18:17:55 +02:00
workflows	ci: replace unsecured curl hadolint download with an official action	2026-03-22 14:26:25 +01:00
CODEOWNERS	Update crates, workflow and issue template (#6056)	2025-07-13 00:48:56 +02:00
FUNDING.yml	Add liberapay funding option	2022-10-20 21:07:26 +02:00
security-contact.gif	Adding a SECURITY.md	2021-06-26 11:49:00 +02:00