Alex Jbanca 32737dcdd6 ci: pin status-go submodule URL to upstream in PR checks ...

A PR can edit .gitmodules to point vendor/status-go at an arbitrary
remote, letting the policy check validate against attacker-controlled
refs (a fake develop branch containing any pin). Override the configured
URL with the canonical upstream before 'git submodule update' in both
jobs; a pin that doesn't exist upstream now fails the update, which is
the correct verdict.

2026-07-28 14:50:54 +03:00

..

actions/qt-android-arch

chore(mobile): Cleaning the build scripts and split README into smaller pieces

2025-06-10 11:28:12 +03:00

ISSUE_TEMPLATE

chore: add mobile device field to bug issue template (#20622)

2026-04-29 12:56:58 +02:00

skills

chore: add (selected) Qt AI skills

2026-07-28 10:05:16 +02:00

workflows

ci: pin status-go submodule URL to upstream in PR checks

2026-07-28 14:50:54 +03:00

CODEOWNERS

chore(codeowners): add Noelia to QML files and add Messenger owners

2025-05-14 11:38:09 -04:00

copilot-instructions.md

chore: add copilot instructions

2026-06-10 08:26:32 +02:00

pull_request_template.md

chore: add (selected) Qt AI skills

2026-07-28 10:05:16 +02:00