ci-pipeline

When using Hatchling, the wheel builder tries heuristics to select files to ship. If your distribution name (e.g. `craic-demo`) implies a normalized module name (e.g. `craic_demo`) but your repo doesn...

Commonly used GitHub Actions advance major versions faster than LLM training data. Acting on LLM-suggested versions without verification may reference an outdated major that misses features, performan...

Action tags are git tags and can be silently retargeted. A compromised maintainer can repoint @v4 at a malicious commit and every consumer pulls it on the next run. GitHub added an org/enterprise poli...

Unlike `pull_request`, `pull_request_target` runs against the base branch with the target repository's secrets available, while PR-author-controlled fields (title, body, branch name, head ref) feed in...