- Pin actions/checkout to full SHA (v4.2.2) to prevent mutable tag RCE - Remove branch filter so CI runs on push to every branch, not just main
204 B
204 B
- Pin actions/checkout to full SHA (v4.2.2) to prevent mutable tag RCE - Remove branch filter so CI runs on push to every branch, not just main