Repository navigation

fix(ci): pin third-party actions to full commit SHAs (#76) #150

Job	Run time
governance / Security policy checks	4s
governance / Code quality + docs	8s
governance / Check Workflow Staleness	7s
governance / Licence consistency	8s
governance / Guix packaging policy (Nix retired)	8s
governance / Workflow security linter	8s
governance / Well-Known (RFC 9116 + RSR)	6s
governance / Allowlist Preflight	10s
governance / Language / package anti-pattern policy	8s
governance / Trusted-base reduction policy	5s
governance / Debt ratchet	0s
governance / Exemption ratchet	0s
governance / Validate Hypatia Baseline	3s
	1m 15s