mirror of
https://github.com/Jeuners/ECC.git
synced 2026-09-09 23:12:30 +02:00
Pin all GitHub Actions to commit SHAs instead of mutable version tags across ci.yml, release.yml, maintenance.yml, and all reusable workflows. This prevents supply-chain attacks via tag hijacking. Add the required Skills section to CLAUDE.md mapping project files (README.md, .github/workflows/*.yml) to their respective review skills. |
||
|---|---|---|
| .. | ||
| ci.yml | ||
| maintenance.yml | ||
| monthly-metrics.yml | ||
| release.yml | ||
| reusable-release.yml | ||
| reusable-test.yml | ||
| reusable-validate.yml | ||