StepSecurity Bot 902d361107 CI/CD Hardening: Fixing StepSecurity Flagged Issues (#11724) ...

### Summary
I'm fixing one or more of the following CI/CD misconfigurations to
improve security. Please feel free to leave a comment if you think the
current permissions for the GITHUB_TOKEN should not be restricted so I
can take a note of it as accepted behaviour.

- Restrict permissions for GITHUB_TOKEN
- Add step-security/harden-runner
- Pin Actions to a full length commit SHA

### Security Fixes
will fix https://github.com/neondatabase/cloud/issues/26141

2025-04-25 14:36:45 +00:00

..

actions

CI(benchmarks): upload perf results for passed tests (#11649)

2025-04-22 09:41:28 +00:00

ISSUE_TEMPLATE

[infra/notes] impr: add issue types to issue templates (#10018)

2025-01-31 06:29:06 +00:00

scripts

impr(ci): send clearer notifications to slack when retrying container image pushes (#11447)

2025-04-04 14:56:41 +00:00

workflows

CI/CD Hardening: Fixing StepSecurity Flagged Issues (#11724)

2025-04-25 14:36:45 +00:00

actionlint.yml

introduce new runners: unit-perf and use them for benchmark jobs (#11409)

2025-04-15 08:21:44 +00:00

file-filters.yaml

Move cargo-deny into a separate workflow on a schedule (#10289)

2025-01-31 13:42:59 +00:00

pull_request_template.md

Remove checklist from the PR template (#9702)

2024-11-11 17:01:02 +00:00