Andriy Kalashnykov 46f37ae4fb chore: pin actions to commit SHAs and add Skills section to CLAUDE.md ...

Pin all GitHub Actions to commit SHAs instead of mutable version tags
across ci.yml, release.yml, maintenance.yml, and all reusable workflows.
This prevents supply-chain attacks via tag hijacking.

Add the required Skills section to CLAUDE.md mapping project files
(README.md, .github/workflows/*.yml) to their respective review skills.

46f37ae4fb · 2026-03-29 17:16:56 -04:00

History

..

ISSUE_TEMPLATE

chore(config): governance and config foundation (#292)

2026-03-16 13:39:03 -07:00

workflows

chore: pin actions to commit SHAs and add Skills section to CLAUDE.md

2026-03-29 17:16:56 -04:00

FUNDING.yml

chore: clean up FUNDING.yml format

2026-02-28 10:09:51 -08:00

PULL_REQUEST_TEMPLATE.md

chore(config): governance and config foundation (#292)

2026-03-16 13:39:03 -07:00

release.yml

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00