Andrew Brandt

Implement Snyk in repo and configure. Identified as part of 2024 Q3 audit tasks.

Implement CodeQL in repo as identified in 2024 Q3 audit.

Replace the following actions with step-security versions: - `nick-fields/retry` - `aslafy-z/conventional-pr-title-action` Search the repo for `Note: ` to find all occurrences that should be replaced.

Add CodeQL to repo.

Add snyk to repo.

Add codecov to repo.

cI: require verfied commits

11

Require signed commits from all developers and dependabot as it is best practice to do so.

**Description**: Update the actions in the `testnet-build.yml` file to pinned commit SHAs. The following actions were updated to the latest version: `actions/checkout` previously `v2`, now `v4.2.2` The following actions were...

ci: actions in workflow should be pinned to commit SHA not tags

1

It is best practice for actions in a workflow to be pinned to a specific commit SHA rather than using the latest tag. This is because using the latest tag...

Replace the following actions with step-security versions: - `pnpm/action-setup` - `aslafy-z/conventional-pr-title-action` Search the repo for `Note: ` to find all occurrences that should be replaced.