Adam Moussa 09052fa91a chore: resolve open code scanning alerts (#58) ... * ci: add least-privilege permissions blocks to workflow callers Resolves code scanning alerts #9 and #11 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match. * fix: turn off debug mode in Flask app configuration. Resolves code scanning alert #2 (Flask app is run in debug mode) * ci: bump reusable workflow pin to f71002a (ruff 0.15.22 pin) Picks up Sea-Haven-Industries/.github#88, which pins ruff in ci-python-sam so unpinned installs no longer float to new releases with changed default rule sets (0.16.0 broke CI with 89 pre-existing findings). Refs Sea-Haven-Industries/.github#87.		2026-07-23 20:00:47 +00:00
..
workflows	chore: resolve open code scanning alerts (#58)	2026-07-23 20:00:47 +00:00
dependabot.yml	Repo hygiene: PR labeler + README badges + dependabot (INFRA-56/57/66) (#26)	2026-06-11 14:13:54 -04:00