Repository navigation

fix(ci): pin third-party actions to full commit SHAs (#210) #361

Job	Run time
governance / Code quality + docs	13s
governance / Licence consistency	10s
governance / Well-Known (RFC 9116 + RSR)	10s
governance / Security policy checks	9s
governance / Guix primary / Nix fallback policy	12s
governance / Trusted-base reduction policy	16s
governance / Check Workflow Staleness	12s
governance / Language / package anti-pattern policy	37s
governance / Workflow security linter	8s
governance / Validate Hypatia Baseline	2m 24s
	4m 31s