- Restrict release workflow defaults to read-only access - Grant `id-token` only to the publish job - Document safe handling for `pull_request_target` in PR size checks
Julius Marminge committed on 5/13/2026, 12:19:18 PMparent7e20b23
2 files changedLine totals unavailable