Aurélien Bombo 2ee3470627 ci: gha: Remove ok-to-test label on every push ...

This removes the ok-to-test label on every push, except if the PR author
has write access to the repo (ie. permission to modify labels).

This protects against attackers who would initially open a genuine PR,
then push malicious code after the initial review.

Signed-off-by: Aurélien Bombo <abombo@microsoft.com>

2025-06-09 12:37:06 -05:00

..

cargo-deny-composite-action

gha: Pin third-party actions to commit hashes

2025-03-19 13:52:49 -05:00

workflows

ci: gha: Remove ok-to-test label on every push

2025-06-09 12:37:06 -05:00

actionlint.yaml

ci: Add riscv-builder to actionlint.yaml

2025-03-13 13:43:29 +08:00

dependabot.yml

ci: Add dependabot groups

2025-06-02 14:45:31 +01:00