Viktor Szakats ef068fc8b7 GHA: pin containers to hash (where missing) ... Fixing this with zizmor v1.25.0: ``` error[unpinned-images]: unpinned image references --> .github/workflows/linux-old.yml:59:5 59 | container: 'debian:stretch' | ^^^^^^^^^^^^^^^^^^^^^^^^^^^ container image is not pinned to a SHA256 hash = help: audit documentation -> https://docs.zizmor.sh/audits/#unpinned-images [...] ``` Ref: https://github.com/curl/curl/actions/runs/25890035949/job/76090925291?pr=21618 Sadly there is no automatic mechanism to bump them.. Also: - replace `debian-stretch` with its slim variant. - bump one of the two Alpine jobs from 3.20 to 3.23.4. Closes #21619		2026-05-15 01:37:39 +02:00
..
ISSUE_TEMPLATE	VULN-DISCLOSURE-POLICY.md: use hackerone	2026-02-26 07:57:19 +01:00
scripts	show-headers.md: mention bold headers and --no-styled-output	2026-05-04 17:31:08 +02:00
workflows	GHA: pin containers to hash (where missing)	2026-05-15 01:37:39 +02:00
CODEOWNERS	CI: add whitespace checker	2024-06-27 13:33:30 +02:00
CONTRIBUTING.md	tidy-up: Markdown, clang-format nits	2026-01-22 23:44:47 +01:00
dependabot.yml	GHA/dependabot: tidy-ups	2025-11-02 17:45:50 +01:00
FUNDING.yml	copyright: update all copyright lines and remove year ranges	2023-01-03 09:19:21 +01:00
labeler.yml	tidy-up: miscellaneous	2026-04-30 20:22:23 +02:00
lock.yml	copyright: update all copyright lines and remove year ranges	2023-01-03 09:19:21 +01:00
stale.yml	badwords: fix issues found in scripts and other files	2025-11-17 17:18:07 +01:00