more hardening of ci steps (#12834)

* fix rule: zizmor/self-repository

* pin to version

* fix --proto "=https"

* another shell:S6506

* fix shell:S8541

* fix githubactions:S8541

* fix githubactions:S8541

* more sec fixes

* fix psycopg version

* more script disabling on frontend
This commit is contained in:
Matthias Mair
2026-09-11 16:55:04 +10:00
committed by GitHub
parent c26db6a790
commit 7d9443dbf8
10 changed files with 52 additions and 52 deletions
+4 -4
View File
@@ -67,7 +67,7 @@ jobs:
with:
persist-credentials: false
- name: Environment Setup
uses: ./.github/actions/setup
uses: $/.github/actions/setup
with:
apt-dependency: gettext poppler-utils
dev-install: true
@@ -117,7 +117,7 @@ jobs:
with:
persist-credentials: false
- name: Environment Setup
uses: ./.github/actions/setup
uses: $/.github/actions/setup
with:
apt-dependency: gettext poppler-utils libmysqlclient-dev
pip-dependency: mysqlclient
@@ -164,7 +164,7 @@ jobs:
with:
persist-credentials: false
- name: Environment Setup
uses: ./.github/actions/setup
uses: $/.github/actions/setup
with:
apt-dependency: gettext poppler-utils libpq-dev
pip-dependency: psycopg
@@ -199,7 +199,7 @@ jobs:
persist-credentials: false
name: Checkout Code
- name: Environment Setup
uses: ./.github/actions/setup
uses: $/.github/actions/setup
with:
install: true
- name: Fetch Database