veilor-org 130f0432dd ci: TODO marker for SHA-pinning third-party actions ... Note that all `uses:` directives still resolve to mutable major- version tags. SHA-pinning is the Agent 8 audit recommendation but requires per-action web lookups that stalled the previous SRE attempt; tracked separately so this PR can land first.		2026-05-06 10:41:19 +01:00
..
workflows	ci: TODO marker for SHA-pinning third-party actions	2026-05-06 10:41:19 +01:00
CODEOWNERS	ci: switch refs from veilor → veilor-org (GH org slug); domain veilor.org	2026-04-30 13:59:20 +01:00
PULL_REQUEST_TEMPLATE.md	ci: github actions workflow (build-iso + lint), CONTRIBUTING, CODEOWNERS, PR template	2026-04-30 13:56:03 +01:00