Affaan Mustafa daf0355531 ci: harden workflow install boundaries ... - run non-test workflow installs with npm ci --ignore-scripts where lifecycle scripts are not needed\n- reject plain npm ci in workflows with write permissions\n- reject actions/cache in id-token: write workflows to reduce OIDC publish cache-poisoning risk		2026-05-12 21:55:36 -04:00
..
ci.yml	ci: harden workflow install boundaries	2026-05-12 21:55:36 -04:00
maintenance.yml	ci: harden workflow install boundaries	2026-05-12 21:55:36 -04:00
monthly-metrics.yml	build(deps): bump actions/github-script from 8.0.0 to 9.0.0	2026-04-12 04:52:39 +00:00
release.yml	ci: ignore install scripts in release workflows (#1839)	2026-05-12 21:36:36 -04:00
reusable-release.yml	ci: ignore install scripts in release workflows (#1839)	2026-05-12 21:36:36 -04:00
reusable-test.yml	ci: keep package manager cache failures non-blocking	2026-05-12 18:03:30 -04:00
reusable-validate.yml	fix: harden CI validators	2026-05-11 03:08:43 -04:00