hf-security-analysis[bot] 0377f0c1b3 Pin GitHub Actions to commit SHAs (#14853) ...

A tag is mutable: whoever controls the action's repository can move
`v4` to different code, and the next run picks it up with no diff to
review. Pinning to the commit SHA freezes the code that runs today.

Co-authored-by: hf-security-analysis[bot] <265538906+hf-security-analysis[bot]@users.noreply.github.com>

2026-09-23 16:05:59 +02:00

..

actions/setup-miniconda

Fix typos, improve, update at main-page files and .github files (#5588)

2023-11-14 11:46:52 -08:00

ISSUE_TEMPLATE

Remove JAX/Flax (#14169)

2026-07-21 13:12:27 +05:30

workflows

Pin GitHub Actions to commit SHAs (#14853)

2026-09-23 16:05:59 +02:00

dependabot.yml

chore: enable Dependabot weekly GitHub Actions bumps (#13812)

2026-05-26 21:13:07 +05:30

labeler.yml

[CI] Add PR/Issue Auto Labeler (#13380)

2026-04-07 10:02:18 +05:30

PULL_REQUEST_TEMPLATE.md

ask to share self-review notes (#14185)

2026-07-14 18:10:30 -10:00