Kristopher Overholt e15aa4b918 Secure CI workflows with zizmor ahead of enforced rollout (#1872) ...

* ci: pin actions to SHAs and harden workflows with zizmor auto-fixes

* ci: set least-privilege GITHUB_TOKEN permissions on workflows

* ci: move PR/issue context into env vars to prevent template injection

2026-06-26 12:31:45 -05:00

3.6 KiB

Raw Permalink Blame History

View Raw