Dylan M. Taylor a07e05a207 ci: run Harden-Runner on every job (#6629) ...

Adds step-security/harden-runner (audit, pinned to v2.22.4 like
craft-common-actions) as the first step of each job that did not have it,
so every workflow in the org's public repos reports its egress to
StepSecurity. Audit, not block: block-mode allow lists come from each
job's observed traffic.

2026-11-11 12:42:58 -05:00

..

affinity-corpus.yml

ci: run Harden-Runner on every job (#6629)

2026-11-11 12:42:58 -05:00

ci.yml

egui037: migrate VectorCraft UI and reconcile current main

2026-10-25 03:27:29 +01:00

freebsd.yml

egui037: migrate VectorCraft UI and reconcile current main

2026-10-25 03:27:29 +01:00

house-rules.yml

Copy the shared house rules into AGENTS.md.

2026-11-06 11:50:02 +01:00

nix.yml

ci: switch to shared nix workflow from craft-common-actions

2026-10-16 14:57:18 +07:00

packaging-lint.yml

ci: run Harden-Runner on every job (#6629)

2026-11-11 12:42:58 -05:00

print.yml

ci: run the desktop printing check through the shared gate (#5062)

2026-11-01 10:55:12 +01:00

release.yml

ci: run Harden-Runner on every job (#6629)

2026-11-11 12:42:58 -05:00

sonarcloud.yml

ci(sonar): don't cancel superseded runs on main, so coverage is published (#3881)

2026-10-23 16:51:11 -04:00

windows-arm64.yml

CI: workflows only call craft-common-actions at @main (#4656)

2026-10-29 22:36:34 -04:00