implementer d0c3b6a83d ci: pin third-party actions to full commit SHAs and declare minimal workflow permissions (E00-S05-T01) ...

- actions/checkout pinned to 11bd71901bbe5b1630ceea73d27597364c9af683 (v4.2.2)
- actions/setup-node pinned to 1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a (v4.2.0)
- workflow-level permissions: contents: read (the pipeline only reads the repo)
- no floating @v4 tags remain anywhere in the workflow

2026-08-30 06:29:43 +00:00

..

ci.yml

ci: pin third-party actions to full commit SHAs and declare minimal workflow permissions (E00-S05-T01)

2026-08-30 06:29:43 +00:00