Verify GH action tag/SHA combinations#356

Draft

snazy wants to merge 10 commits intoapache:mainfrom

snazy:gh-action-sha-tag-check

Commits on Feb 14, 2026

setup-bazel: remove wildcard allowlisting

raboof
authored and
snazy
committed
clean up remaining 'no expiration'

raboof
authored and
snazy
committed
avoid having both 'keep' and 'expires_at'

raboof
authored and
snazy
committed
Fix coursier/cache-action reference
snazy
committed
Fix leafo/gh-actions-luarocks reference
snazy
committed
Verify GH action tag/SHA combinations
snazy
committed
move GH actions tags check to separate workflow
snazy
committed
consider the 'keep' flag
snazy
committed

Commits on Feb 16, 2026