chore: harden Github Actions workflows - #3559

Draft

Florence-Njeri wants to merge 8 commits into

asyncapi:masterfrom

Florence-Njeri:hardening-GA

SonarQubeCloud / SonarCloud Code Analysis failed May 27, 2026 in 23s

Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check failure on line 19 in .github/workflows/maintainer_management.yml

sonarqubecloud / SonarCloud Code Analysis

Make sure that no untrusted code is executed from a fork.

See more on https://sonarcloud.io/project/issues?id=asyncapi_community&issues=AZ5rG7KfCv0_1Y1L6IL-&open=AZ5rG7KfCv0_1Y1L6IL-&pullRequest=3559

Check failure on line 27 in .github/workflows/maintainer_management.yml

sonarqubecloud / SonarCloud Code Analysis

Make sure that no untrusted code is executed from a fork.

See more on https://sonarcloud.io/project/issues?id=asyncapi_community&issues=AZ5rG7KfCv0_1Y1L6IL_&open=AZ5rG7KfCv0_1Y1L6IL_&pullRequest=3559

Check failure on line 21 in .github/workflows/ambassador_management.yml

sonarqubecloud / SonarCloud Code Analysis

Make sure that no untrusted code is executed from a fork.

See more on https://sonarcloud.io/project/issues?id=asyncapi_community&issues=AZ5p154J4bIZzb5OGaGr&open=AZ5p154J4bIZzb5OGaGr&pullRequest=3559

Check failure on line 28 in .github/workflows/ambassador_management.yml

sonarqubecloud / SonarCloud Code Analysis

Make sure that no untrusted code is executed from a fork.

See more on https://sonarcloud.io/project/issues?id=asyncapi_community&issues=AZ5p154J4bIZzb5OGaGs&open=AZ5p154J4bIZzb5OGaGs&pullRequest=3559

View more details on SonarQubeCloud