Sylvain Bellemare 0959ea80db Improve security of dockerfiles ... * Verify checksum of downloaded rust target riscv32imac-unknown-xous_*.zip * Pin base image to a sha256 digest * Quote build arg to prevent shell injection attacks * Run cargo --locked to make sure builds follow Cargo.lock * Use --proto '=https' for curl to only allow HTTPS protocol to prevent downgrade attacks * Create non-root user to run cargo commands and build artifacts		2026-01-16 16:41:43 +09:00
..
workflows	Improve security of dockerfiles	2026-01-16 16:41:43 +09:00