Lucas Berger 26a6b2e53f fix(16): WR-01/WR-03 bind PR context via env; symmetric HEAD_SHA fallback ...

Bind github.base_ref/base.sha/head.sha through env: and reference quoted
shell vars (no inline ${{ }} in run:) to close the script-injection vector.
Add a HEAD_SHA rev-parse fallback mirroring BASE_SHA and echo the final
${BASE_SHA}..${HEAD_SHA} range before gitleaks.

2026-06-13 08:42:40 -04:00

..

ci.yml

fix(16): WR-01/WR-03 bind PR context via env; symmetric HEAD_SHA fallback

2026-06-13 08:42:40 -04:00

publish.yml

ci(16-06): add static image-hygiene assertion + boot-smoke before push

2026-06-13 08:27:13 -04:00