Close the cheap CodeQL findings: pinned actions, token scopes, TLS identity, private temp files - #1134

Merged

vharseko merged 5 commits into

OpenIdentityPlatform:masterfrom

vharseko:codeql-medium-quick-fixes

Sep 29, 2026

Commits on Sep 29, 2026

Close the cheap CodeQL findings: pinned actions, token scopes, TLS identity, private temp files
vharseko
committed
cb50e65
Let Dependabot move the pinned action SHAs
vharseko
committed
d74590b
Label the dependabot GitHub Actions PRs like OpenIG does
vharseko
committed
03ddd2c
Let deployments turn the SMTP server identity check off; pin the temp-file call sites
vharseko
committed
59890a1
Keep the SMTP identity check unless it is explicitly off; pin ServerTest on a fresh storage directory
vharseko
committed
587492f