9 commits

Author	SHA1	Message	Date
fettpl	d2ed5113e9	fix(ci): pin sandbox Dockerfile base image to digest (#520) ... Pin ubuntu:22.04 to its current manifest digest to ensure reproducible builds and prevent supply-chain mutations. Closes #513 Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-17 07:50:32 -05:00
Chummy	b81e4c6c50	ci: add strict delta lint gate for changed rust lines	2026-02-17 15:21:55 +08:00
Chummy	6528613c8d	ci: unify rust quality gate and add incremental docs/link checks	2026-02-17 15:21:55 +08:00
Chummy	b161fff9ef	chore(ci): align lint gate and add strict audit path (#410)	2026-02-17 01:36:17 +08:00
Chummy	4ede1c95ed	Merge pull request #392 from fettpl/fix/362-pin-cargo-audit ... ci: pin cargo-audit to 0.22.1 in dev CI Dockerfile	2026-02-17 01:10:56 +08:00
fettpl	47e5483ade	ci: pin cargo-audit to 0.22.1 in dev CI Dockerfile ... Match the version pinned in the security workflow to ensure reproducible CI builds. Closes #362 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 17:50:17 +01:00
fettpl	38f6339a83	ci: pin Docker base images to SHA256 digests ... Pin all FROM images in Dockerfile and dev/ci/Dockerfile to their current SHA256 manifest digests for reproducible builds. - rust:1.93-slim-trixie → @sha256:9663b80a... - busybox:latest → busybox:1.37@sha256:b3255e7d... - debian:trixie-slim → @sha256:f6e2cfac... - gcr.io/distroless/cc-debian13:nonroot → @sha256:84fcd3c2... - rust:1.92-slim → @sha256:bf3368a9... Closes #359 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 17:42:05 +01:00
Will Sarg	b61d33aa1c	feat(dev): add local dockerized ci workflow (#342)	2026-02-16 09:10:39 -05:00
Argenis	20f857a55a	feat(dev): add containerized development environment ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-15 11:10:45 -05:00