Adam Moussa 849f33a0bc chore: resolve open code-scanning alerts (workflow permissions + Gusto URL sanitization) (#81) ... * ci: add least-privilege permissions blocks to workflow callers Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match. * enhance(email): improve detection of allowed Gusto URLs in email classification Resolves code scanning alert #2		2026-07-23 20:38:07 +00:00
..
workflows	chore: resolve open code-scanning alerts (workflow permissions + Gusto URL sanitization) (#81)	2026-07-23 20:38:07 +00:00
dependabot.yml	ci: add github-actions to dependabot coverage (INFRA-130) (#61)	2026-07-08 16:53:37 -04:00