Search results

WORKFLOW-DEEP-DIVE.md mislabels claude-wrapper as "this repo"

tech-debtTechnical debt to addressTechnical debt to address

Status: Open.

#25 In smartwatermelon/dev-env;

· smartwatermelon opened on May 1, 2026

Quarterly GitHub Actions security audit — 2026 Q2

audit

securitySecurity-related concernSecurity-related concern

Status: Open.

#23 In smartwatermelon/dev-env;

· smartwatermelon opened on Apr 29, 2026

Audit/disable 'Allow GitHub Actions to approve PRs' across repos

Status: Open.

#21 In smartwatermelon/dev-env;

· smartwatermelon opened on Apr 29, 2026

SHA-pin remaining tag-pinned third-party actions across all repos

Status: Open.

#20 In smartwatermelon/dev-env;

· smartwatermelon opened on Apr 29, 2026

Adopt zizmor for GitHub Actions linting across all repos

Status: Open.

#19 In smartwatermelon/dev-env;

· smartwatermelon opened on Apr 29, 2026

Add post-commit hook commit-hash reliability item to validation checklist

tech-debtTechnical debt to addressTechnical debt to address

Status: Open.

#18 In smartwatermelon/dev-env;

· smartwatermelon opened on Apr 28, 2026

Semgrep: --staged flag does not exist — scan scope is broader than intended

Status: Open.

#1 In smartwatermelon/dev-env;

· smartwatermelon opened on Mar 25, 2026