Roshan Khatri 9000e26ecf Pin workflow pip/go/npm dependencies for OpenSSF compliance (#3276) ...

Pin package manager dependencies in CI workflows to improve the Pinned-Dependencies
score in OpenSSF Scorecard.

Changes:
- benchmark-on-label.yml, benchmark-release.yml: add `--require-hashes`
  to `pip install` adding on valkey-perf-benchmark repo:
  https://github.com/valkey-io/valkey-perf-benchmark/pull/44
- ci.yml: pin `yamlfmt` to `v0.21.0` instead of `@latest`
- reply-schemas-linter.yml: use npm ci with `package-lock.json` instead
  of unpinned npm install, package files in `utils/reply-schema-linter/`

Signed-off-by: Roshaan Khatri <rvkhatri@amazon.com>
Signed-off-by: Roshan Khatri <rvkhatri@amazon.com>

2026-03-20 15:11:00 +01:00

..

benchmark_configs

Add PR and Release benchmark with new changes in framework (#2871)

2025-12-04 17:33:21 +01:00

instructions

Introduce GoogleTest for Valkey unit testing (#3241)

2026-02-26 14:14:23 -08:00

ISSUE_TEMPLATE

Add test failure template to contributing guide (#2491)

2025-08-17 11:58:32 +02:00

workflows

Pin workflow pip/go/npm dependencies for OpenSSF compliance (#3276)

2026-03-20 15:11:00 +01:00

copilot-instructions.md

Add copilot review instructions (#3076)

2026-01-20 14:57:19 -08:00

dependabot.yml

Format yaml files (#615)

2024-06-14 13:40:06 -07:00