fettpl 9df5a07640 ci: pin all GitHub Actions to full SHA digests ... Pin every third-party GitHub Action to its current commit SHA with a version comment, eliminating supply chain risk from mutable version tags. Mutable tags (v4, v2, etc.) can be force-pushed by upstream maintainers; SHA digests are immutable. 18 unique actions pinned across 9 workflow files. Closes #357 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-02-16 17:32:18 +01:00
..
ISSUE_TEMPLATE	docs: strengthen collaboration governance and AGENTS engineering protocol (#263)	2026-02-16 05:59:04 -05:00
workflows	ci: pin all GitHub Actions to full SHA digests	2026-02-16 17:32:18 +01:00
CODEOWNERS	`chore(codeowners): route ci/docs surfaces to @chumyin	2026-02-16 21:59:38 +08:00
dependabot.yml	docs: strengthen collaboration governance and AGENTS engineering protocol (#263)	2026-02-16 05:59:04 -05:00
labeler.yml	docs: strengthen collaboration governance and AGENTS engineering protocol (#263)	2026-02-16 05:59:04 -05:00
pull_request_template.md	docs: strengthen collaboration governance and AGENTS engineering protocol (#263)	2026-02-16 05:59:04 -05:00