Gergo Magyar 1a2c480847 fix(devcontainer): set persist-credentials:false on CI checkouts + prettier ... - zizmor `artipacked` (CodeQL/GitHub Advanced Security) flagged both actions/checkout steps in ci-devcontainer.yml: checkout defaults to persist-credentials:true, leaving GITHUB_TOKEN in .git/config where it can leak into uploaded artifacts. Both jobs are read-only (run tests / build smoke, never push), so persist-credentials:false is correct — matches the repo convention in codeql.yml / ci-tests.yml. - Ran prettier 3.8.0 over the new .cjs modules + test (single-quote/style normalization to match the repo). JSON/YAML were already compliant; README is in .prettierignore; .sh has no prettier parser. Behavior unchanged — 12/12 transform unit tests still pass.		2026-05-28 21:51:55 +01:00
..
actions	fix(security): Pin Docker Node base images, remove runtime package-manager CVE surface, verify Trivy on PRs, and harden Dependabot policy (#1455)	2026-05-09 16:55:31 +01:00
ISSUE_TEMPLATE	docs: agent development framework, GitHub templates, eval refactor (#479)	2026-03-25 06:48:41 +00:00
scripts	fix(security): close URL/regex/tag-filter sanitization cluster (U7) (#1330)	2026-05-08 07:11:29 +01:00
workflows	fix(devcontainer): set persist-credentials:false on CI checkouts + prettier	2026-05-28 21:51:55 +01:00
dependabot.yml	fix(security): Pin Docker Node base images, remove runtime package-manager CVE surface, verify Trivy on PRs, and harden Dependabot policy (#1455)	2026-05-09 16:55:31 +01:00
FUNDING.yml	process maps and funding.yml	2026-01-28 13:14:16 +05:30
PULL_REQUEST_TEMPLATE.md	docs: agent development framework, GitHub templates, eval refactor (#479)	2026-03-25 06:48:41 +00:00
release-drafter.yml	ci: standardize workflow concurrency and automate release-note labeling (#837)	2026-04-15 13:24:53 +01:00
release.yml	feat: configure prettier with pre-commit hook (#563)	2026-03-28 14:58:04 +00:00
zizmor.yml	refactor(ci): unify release pipeline under publish.yml (#1610)	2026-05-16 07:46:56 +01:00