Enhance Security Practices for HanLP Based on OpenSSF Scorecard#1931

Merged

hankcs merged 3 commits intohankcs:devfrom

gcanlin:workflow-patch

Dec 18, 2024

Commits on Dec 10, 2024

fix the risk of permissions and unpinned dependencies in the workflow
gcanlin
authored

Commits on Dec 18, 2024

Revert binding to the immutable full sha1 as it may prevent us from getting fixes: https://github.com/actions/toolkit/blob/main/docs/action-versioning.md#compatibility
hankcs
committed
Upgrade GitHub Actions to the latest versions
hankcs
committed