3 commits

Author	SHA1	Message	Date
Adam Moussa	2a98bd51bb	ci: add least-privilege permissions blocks to workflow callers ... Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match.	2026-07-23 16:14:18 -04:00
Adam Moussa	fc4b090bd5	chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) (#58)	2026-07-06 18:27:02 -04:00
Adam Moussa	d813e76a78	Add CI workflow (#24)	2026-05-08 15:49:44 -04:00