ECC/.github/workflows
Affaan Mustafa 797f283036
ci: require npm audit signature checks
Require npm registry signature verification wherever workflow npm audit checks run.

- add npm audit signatures to CI Security Scan and maintenance security audit jobs
- teach the workflow security validator to reject npm audit without signature verification
- keep the repair and Copilot prompt tests portable across Windows path/case and CRLF frontmatter behavior

Validation:
- node tests/run-all.js (2376 passed, 0 failed)
- CI current-head matrix green on #1846
2026-05-12 23:48:56 -04:00
..
ci.yml ci: require npm audit signature checks 2026-05-12 23:48:56 -04:00
maintenance.yml ci: require npm audit signature checks 2026-05-12 23:48:56 -04:00
monthly-metrics.yml build(deps): bump actions/github-script from 8.0.0 to 9.0.0 2026-04-12 04:52:39 +00:00
release.yml ci: ignore install scripts in release workflows (#1839) 2026-05-12 21:36:36 -04:00
reusable-release.yml ci: ignore install scripts in release workflows (#1839) 2026-05-12 21:36:36 -04:00
reusable-test.yml ci: keep package manager cache failures non-blocking 2026-05-12 18:03:30 -04:00
reusable-validate.yml fix: harden CI validators 2026-05-11 03:08:43 -04:00