ci: Address all code scan reports#54

Merged

rodrigo-sobral merged 9 commits into

swan-cern:masterfrom

rodrigo-sobral:master

Apr 29, 2026

Commits on Apr 27, 2026

ci: Address code scan reports (unpinned action reference)

rodrigo-sobral
and
Copilot
committed
ci: Address code scan reports (overly broad permissions)
rodrigo-sobral
committed
ci: Address code scan reports (insufficient job-level concurrency limits)
rodrigo-sobral
committed
ci: Address code scan reports (secrets referenced without a dedicated environment)

rodrigo-sobral
and
Copilot
committed
ci: Address code scan reports (code injection via template expansion)

rodrigo-sobral
and
Copilot
committed
ci: Address code scan reports (credential persistence through GitHub Actions artifacts)
rodrigo-sobral
committed
ci: Address code scan reports (runtime artifacts potentially vulnerable to a cache poisoning attack)
rodrigo-sobral
committed

Commits on Apr 29, 2026