Adam Moussa 299ead89b3 chore: resolve open code scanning alerts (URL host matching + workflow permissions) (#36) ... * fix: Refactor `comment_intent` to use `_contains_url_with_host` for URL host matching. * ci: add least-privilege permissions blocks to workflow callers Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match.		2026-07-23 19:10:45 +00:00
..
workflows	chore: resolve open code scanning alerts (URL host matching + workflow permissions) (#36)	2026-07-23 19:10:45 +00:00
dependabot.yml	fix(deps): bump aws-cdk-lib pin to 2.257.0 (#20)	2026-06-05 13:18:47 -04:00