- Pin actions/checkout to full SHA (v4.2.2) to prevent mutable tag RCE - Remove branch filter so CI runs on push to every branch, not just main
- Pin actions/checkout to full SHA (v4.2.2) to prevent mutable tag RCE - Remove branch filter so CI runs on push to every branch, not just main