fix(ci): split release-please lockfile pipeline (codeql untrusted-checkout/critical)#21

Merged

InstaZDLL merged 2 commits into

mainfrom

fix/codeql-untrusted-checkout-critical

May 15, 2026

Commits on May 15, 2026

fix(ci): split release-please lockfile pipeline (codeql untrusted-checkout/critical)
InstaZDLL
committed
fix(ci): plug script injection in lockfile-build (head.ref attacker-controlled)
InstaZDLL
committed