Alex Jbanca 32737dcdd6 ci: pin status-go submodule URL to upstream in PR checks ...

A PR can edit .gitmodules to point vendor/status-go at an arbitrary
remote, letting the policy check validate against attacker-controlled
refs (a fake develop branch containing any pin). Override the configured
URL with the canonical upstream before 'git submodule update' in both
jobs; a pin that doesn't exist upstream now fails the update, which is
the correct verdict.

2026-07-28 14:50:54 +03:00

..

e2e-appium-android.yml

chore: Update app name to Status and align app package id with the bundle id

2025-10-16 12:32:51 +03:00

pr.yml

ci: pin status-go submodule URL to upstream in PR checks

2026-07-28 14:50:54 +03:00