veilor-org 130f0432dd ci: TODO marker for SHA-pinning third-party actions ... Note that all `uses:` directives still resolve to mutable major- version tags. SHA-pinning is the Agent 8 audit recommendation but requires per-action web lookups that stalled the previous SRE attempt; tracked separately so this PR can land first.		2026-05-06 10:41:19 +01:00
..
build-iso.yml	ci: TODO marker for SHA-pinning third-party actions	2026-05-06 10:41:19 +01:00
lint.yml	ci: scope brand-leak lint to source dirs only (#6)	2026-05-02 04:07:03 +01:00