Hardening for pull_request_target usage #18
Description
Audit actions to avoid checking out untrusted code; document security notes and safe patterns.\n\nAcceptance:\n- Docs callouts added\n- Code avoids unsafe operations
{{ message }}
Audit actions to avoid checking out untrusted code; document security notes and safe patterns.\n\nAcceptance:\n- Docs callouts added\n- Code avoids unsafe operations