- Pin actions/checkout to commit SHA (v4.2.2) to prevent tag mutation attacks - Remove branch filters so CI runs on push to all branches, not just main
Runs docker build . on push to main and pull requests.