Luke Mino-Altherr 668cb0748e Pin reusable workflow to commit SHA + add explicit permissions ... Best-practice hardening for the caller of the reusable detector workflow: - Replace @v1 tag with the immutable commit SHA 5d9602ee... (# v1 comment preserves human-readable version info). Satisfies pin-validation tools like pinact and zizmor. - Add explicit minimum permissions (contents: read, pull-requests: read) at workflow level so the default permissive token scope is not granted.		2026-05-27 19:00:04 -07:00
..
ISSUE_TEMPLATE	bug_report template: Push harder for logs (#12657)	2026-02-26 18:59:24 -05:00
PULL_REQUEST_TEMPLATE	chore(api-nodes): adjusted PR template; set min python version for pylint to 3.10 (#10787)	2025-11-18 03:59:27 -08:00
scripts	ci: add check to block AI agent Co-authored-by trailers in PRs (#12799)	2026-03-16 15:53:13 -04:00
workflows	Pin reusable workflow to commit SHA + add explicit permissions	2026-05-27 19:00:04 -07:00