Affaan Mustafa daf0355531 ci: harden workflow install boundaries ... - run non-test workflow installs with npm ci --ignore-scripts where lifecycle scripts are not needed\n- reject plain npm ci in workflows with write permissions\n- reject actions/cache in id-token: write workflows to reduce OIDC publish cache-poisoning risk		2026-05-12 21:55:36 -04:00
..
ISSUE_TEMPLATE	chore(config): governance and config foundation (#292)	2026-03-16 13:39:03 -07:00
workflows	ci: harden workflow install boundaries	2026-05-12 21:55:36 -04:00
dependabot.yml	fix: CI fixes, security audit, remotion skill, lead-intelligence, npm audit (#1039)	2026-03-31 15:08:55 -04:00
FUNDING.yml	chore: clean up FUNDING.yml format	2026-02-28 10:09:51 -08:00
PULL_REQUEST_TEMPLATE.md	chore(config): governance and config foundation (#292)	2026-03-16 13:39:03 -07:00
release.yml	feat: deliver v1.8.0 harness reliability and parity updates	2026-03-04 14:48:06 -08:00