Affaan Mustafa daf0355531 ci: harden workflow install boundaries ...

- run non-test workflow installs with npm ci --ignore-scripts where lifecycle scripts are not needed\n- reject plain npm ci in workflows with write permissions\n- reject actions/cache in id-token: write workflows to reduce OIDC publish cache-poisoning risk

2026-05-12 21:55:36 -04:00

..

agent-instruction-safety.test.js

test: report instruction guardrails independently

2026-04-30 09:39:54 -04:00

agent-yaml-surface.test.js

fix: remove canonical Anthropic skill duplicates

2026-04-30 00:21:13 -04:00

catalog.test.js

fix: sync skill frontmatter and catalog counts

2026-05-11 02:33:29 -04:00

code-reviewer-false-positive-guard.test.js

feat: salvage code-reviewer false-positive guardrails (#1817)

2026-05-12 15:01:46 -04:00

codex-skill-surface.test.js

feat: add machine learning engineering workflow

2026-05-11 17:55:50 -04:00

mle-workflow-coverage.test.js

feat: add machine learning engineering workflow

2026-05-11 17:55:50 -04:00

no-personal-paths.test.js

fix: harden CI validators

2026-05-11 03:08:43 -04:00

validate-workflow-security.test.js

ci: harden workflow install boundaries

2026-05-12 21:55:36 -04:00

validators.test.js

docs: salvage focused stale PR contributions

2026-05-11 05:31:12 -04:00