GitHub Actions 6675f2a169 fix: Implement dependency digest tracking for nightly builds ...

- Updated Docker Compose files to use digest-pinned images for CI contexts.
- Enhanced Dockerfile to pin Go tool installations and verify external downloads with SHA256 checksums.
- Added Renovate configuration for tracking Go tool versions and digest updates.
- Introduced a new design document outlining the architecture and data flow for dependency tracking.
- Created tasks and requirements documentation to ensure compliance with the new digest pinning policy.
- Updated security documentation to reflect the new digest pinning policy and exceptions.

2026-01-30 06:39:26 +00:00

2.3 KiB

Executable File

Raw Blame History

View Raw