s8n f2e36bfead ci(bluebuild): pin blue-build/github-action to commit SHA ... Replace @v1 with @24d146df25adc2cf579e918efe2d9bff6adea408 (the commit v1 currently resolves to). Tag pins on third-party actions are mutable — a maintainer or attacker can re-point v1 at a malicious commit and silently change what runs on every push. Trailing comment '# v1' preserves human readability for future bumps. Refs: 9-agent CI hardening wave (agent 8), 2026-05-05.		2026-05-06 10:32:13 +01:00
..
workflows	ci(bluebuild): pin blue-build/github-action to commit SHA	2026-05-06 10:32:13 +01:00
CODEOWNERS	ci: switch refs from veilor → veilor-org (GH org slug); domain veilor.org	2026-04-30 13:59:20 +01:00
PULL_REQUEST_TEMPLATE.md	ci: github actions workflow (build-iso + lint), CONTRIBUTING, CODEOWNERS, PR template	2026-04-30 13:56:03 +01:00