Niels Lohmann eac1b4343b ci: install the remaining pip dependencies with --require-hashes (#6050) ...

Install Semgrep from a new hash-pinned requirements file in
cmake/requirements (covered by Dependabot) instead of a version-only
"pip install semgrep==1.168.0", and pass --require-hashes to the astyle
and natvis installs in check_amalgamation.yml, whose requirements files
got their hashes in #6046. Addresses the Scorecard Pinned-Dependencies
code-scanning alerts for semgrep.yml and check_amalgamation.yml.

Signed-off-by: Niels Lohmann <mail@nlohmann.me>

2026-11-10 08:33:30 +01:00

..

cancel_closed_pr_runs.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

check_amalgamation.yml

ci: install the remaining pip dependencies with --require-hashes (#6050)

2026-11-10 08:33:30 +01:00

check_docs_links.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

cifuzz.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

codeql-analysis.yml

ci: run CodeQL with build-mode none (#6045)

2026-11-10 07:08:13 +01:00

comment_check_amalgamation.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

dependency-review.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

flawfinder.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

json_view_benchmarks.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

labeler.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

macos.yml

Fix the standalone release tarball; update compiler list and CITATION (#5734)

2026-10-06 22:40:10 +02:00

publish_documentation.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

scorecards.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

semgrep.yml

ci: install the remaining pip dependencies with --require-hashes (#6050)

2026-11-10 08:33:30 +01:00

stale.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

ubuntu.yml

ci: pin pip dependencies by hash (#6046)

2026-11-10 07:08:25 +01:00

windows.yml

build(deps): bump lukka/get-cmake from 4.4.4 to 4.4.5 (#6024)

2026-11-04 23:38:57 +01:00