grafana

Files

T

Roberto Jiménez SánchezandClaude 9b3b6fcdb2 Security: Fix actor spoofing vulnerability in Dependabot workflow (#109519 )

Replace github.actor with github.event.pull_request.user.login to prevent
actor context spoofing in pull requests from forks. This ensures only
genuine Dependabot PRs can trigger the workspace update workflow.

Fixes zizmor security finding with Medium confidence level.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-authored-by: Claude <noreply@anthropic.com>

2025-08-12 12:40:03 +00:00

actions

CI: Switch jest unit tests to self-hosted runners (#109304 )

2025-08-08 14:31:14 +01:00

ISSUE_TEMPLATE

Clarify that data source request reports are not for bugs or support requests (#90661 )

2024-07-19 20:07:08 +02:00

workflows

Security: Fix actor spoofing vulnerability in Dependabot workflow (#109519 )

2025-08-12 12:40:03 +00:00

actionlint.yaml

CI: Switch jest unit tests to self-hosted runners (#109304 )