Niels Lohmann eac1b4343b ci: install the remaining pip dependencies with --require-hashes (#6050) ...

Install Semgrep from a new hash-pinned requirements file in
cmake/requirements (covered by Dependabot) instead of a version-only
"pip install semgrep==1.168.0", and pass --require-hashes to the astyle
and natvis installs in check_amalgamation.yml, whose requirements files
got their hashes in #6046. Addresses the Scorecard Pinned-Dependencies
code-scanning alerts for semgrep.yml and check_amalgamation.yml.

Signed-off-by: Niels Lohmann <mail@nlohmann.me>

2026-11-10 08:33:30 +01:00

..

external_ci

Split the Visual Studio 2019 AppVeyor job into two shards (#5872)

2026-10-21 16:25:04 +02:00

ISSUE_TEMPLATE

Clean up non-code files (#5801)

2026-10-11 08:21:51 +02:00

workflows

ci: install the remaining pip dependencies with --require-hashes (#6050)

2026-11-10 08:33:30 +01:00

CODE_OF_CONDUCT.md

Clean up and document project files (#4560)

2025-01-17 06:53:35 +01:00

CODEOWNERS

Clean up non-code files (#5801)

2026-10-11 08:21:51 +02:00

config.yml

Overwork project infrastructure (#5218)

2026-06-30 18:09:06 +02:00

CONTRIBUTING.md

Clean up non-code files (#5801)

2026-10-11 08:21:51 +02:00

dependabot.yml

Review and extend the documentation, and check it in CI (#5638)

2026-10-02 11:32:15 +02:00

FUNDING.yml

Clean up and document project files (#4560)

2025-01-17 06:53:35 +01:00

labeler.yml

Compare json_view with yyjson, simdjson, and Boost.JSON (#5627)

2026-10-22 08:40:33 +02:00

PULL_REQUEST_TEMPLATE.md

Check the fuzzers' UBJSON/BJData round-trip invariants in the unit tests (#5569)

2026-09-25 08:29:02 +02:00

SECURITY.md

Document response times, supported versions, access, secrets, and dependency policies (#5580)

2026-09-25 20:34:58 +02:00