Clear the code scanning alerts in the workflows and the Dependabot config - #87

Merged

abashev merged 6 commits into

mainfrom

code-scanning-alerts

Sep 27, 2026

Commits on Sep 27, 2026

Do not leave the checkout's token in .git/config
abashev
committed
5c93489
Give the two workflows without a permissions block the least they need
abashev
committed
a5b690e
Check who opened the pull request before auto-merging it
abashev
committed
e89a83a
Pass the test JDK's path to the build as a variable
abashev
committed
711a99c
Name the CodeQL action release the pin points to
abashev
committed
71c8c57
Let Dependabot propose a release only once it is a week old
abashev
committed
58fdede