- Pin actions/checkout to commit SHA (v4.2.2) to prevent tag mutation attacks - Remove branch filters so CI runs on push to all branches, not just main
- Pin actions/checkout to commit SHA (v4.2.2) to prevent tag mutation attacks - Remove branch filters so CI runs on push to all branches, not just main