Repository navigation

fix(guardian): review the PR as data, never run its code beside the keys - #731

Merged

zaebee merged 5 commits into

mainfrom

fix/730-guardian-trusted-checkout

Oct 22, 2026

Merged

fix(guardian): review the PR as data, never run its code beside the keys#731
zaebee merged 5 commits into
mainfrom
fix/730-guardian-trusted-checkout

Commits on Oct 22, 2026
- fix(guardian): review the PR as data, never run its code beside the keys
  
  zaebee
  and
  claude
  committed
  7731d3a
- fix(guardian): keep checkout reads inside it, and pin the workflow tighter
  
  zaebee
  and
  claude
  committed
  f5c1cdc
- test(guardian): cover the patterns.yaml containment, and note the anonymous fetch
  
  zaebee
  and
  claude
  committed
  b3c6136
- fix(guardian): close the re-review's gaps in the workflow pin and the collector
  
  zaebee
  and
  claude
  committed
  2bd8724
- fix(guardian): contained() returns the path it checked, and refuses a null byte
  
  zaebee
  and
  claude
  committed
  0a2bddf