David Barragán Merino 46d64da931 👷 Scope the triage GitHub App token ...

Request a token for this repository only, instead of every repository
in the installation, and only with the permissions the job uses: issues
(labels) and organization projects (the board). Also document why the
workflow needs pull_request_target and why it is safe.

Signed-off-by: David Barragán Merino <david.barragan@kaleidos.net>

2026-10-02 09:50:58 +02:00

..

ISSUE_TEMPLATE

🔧 Fix default issue templates

2026-06-10 12:36:21 +02:00

scripts

🐛 Make integration test summary non-fatal on staging

2026-09-15 18:55:11 +02:00

workflows

👷 Scope the triage GitHub App token

2026-10-02 09:50:58 +02:00

actionlint.yaml

👷 Add actionlint and zizmor checks for workflows

2026-09-30 10:31:02 +02:00

config.yml

📝 GitHub issue templates and bots config

2019-08-12 12:55:28 +02:00

dependabot.yml

👷 Pin GitHub Actions to commit SHAs

2026-09-30 15:29:28 +02:00

PULL_REQUEST_TEMPLATE.md

📚 Remove the requirement of changelog update

2026-06-08 12:02:28 +02:00

stale.yml

📝 GitHub issue templates and bots config

2019-08-12 12:55:28 +02:00

zizmor.yml

👷 Scope the triage GitHub App token

2026-10-02 09:50:58 +02:00