[3.x-dev] Update Github Actions - #653

Open

pitbulk wants to merge 2 commits into

3x_improve_cicd

pitbulk commented Aug 6, 2026

Contributor

Update Checkout to 4.x
Security improvements:
- Explicit minimal permissions (least privilege)
- Actions pinned to commit SHAs (supply-chain protection)
- Runner OS pinned (reproducibility)
- PHP versions quoted as strings (YAML float-safe)
- Job timeout set (cost/runaway protection)
- Step ordering: checkout before setup-php
- Removed non-deterministic composer self-update

pitbulk added 2 commits

August 6, 2026 19:06


          Github Actions: Improve workflow configurations

1f838c4


          Update PHP dependencies

bc6c097

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet