Marc-André Bombeck e3bccc86d5 ci(codeql): analyse every push to main ...

A commit that reaches main without a pull request, such as an asset
uploaded through the web UI, was never analysed until the weekly run.
Run on push to main as well. Pull-request runs still cancel their
superseded heads; push runs are grouped per commit and never cancelled,
so back-to-back merges each keep their own analysis.

2026-09-25 19:55:56 +02:00

..

coach-eval.yml

chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0

2026-09-13 15:55:28 +00:00

codeql.yml

ci(codeql): analyse every push to main

2026-09-25 19:55:56 +02:00

dependabot-auto-merge.yml

chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0

2026-09-13 15:55:28 +00:00

docker-publish.yml

chore(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.1 (#1020)

2026-09-20 19:00:55 +02:00

e2e.yml

chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0

2026-09-13 15:55:28 +00:00

env-check.yml

chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0

2026-09-13 15:55:28 +00:00

integration.yml

chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0

2026-09-13 15:55:28 +00:00

knip.yml

chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0

2026-09-13 15:55:28 +00:00

no-todo-markers.yml

chore(release): fold in the coach discriminant, the dependency bumps, and the notes the audit found wrong

2026-07-26 18:57:21 +02:00

post-publish-verify.yml

build(deps): bump docker/login-action from 4.5.1 to 4.6.0

2026-08-03 11:02:10 +00:00

scorecard.yml

chore(deps): bump the codeql-action group with 3 updates

2026-09-13 15:54:49 +00:00

security.yml

ci(security): pin and verify the Trivy installer

2026-09-16 13:05:21 +02:00

synthetic-journey.yml

fix(ops): refuse a synthetic-journey target that is not ours

2026-09-10 01:25:01 +02:00

trivy.yml

chore(deps): bump the codeql-action group with 3 updates

2026-09-13 15:54:49 +00:00