September 24th, 2026 · 1 commits
CI hardening: pin GitHub Actions by digest
A workflow-only security pass pins third-party actions, tightens default token permissions, and closes many scorecard alerts.
Read the issue →