LearningCircuit 20e7085602 docs(ci): correct misleading Scorecard comment on pre-commit install (#4341) ...

The comment claimed version-pinning satisfies Scorecard's
Pinned-Dependencies check, but it does not — the check wants
hash-pinning, so alert #7777 stayed open. Rewrite the comment to state
the actual situation: version pin is for reproducibility/consistency,
the hash-pinning gap is an accepted risk on this read-only lint job,
tracked as dismissed alert #7777.

2026-05-25 15:26:25 +02:00

..

codeql

…

ISSUE_TEMPLATE

docs: fix API example links (#3852)

2026-05-08 01:30:25 +02:00

PULL_REQUEST_TEMPLATE

Improve UI tests + CI: artifact uploads, WebKit skip narrowing, settle-wait migrations (#4061)

2026-05-16 13:17:28 +02:00

scripts

feat: redesign journal quality system with data-driven scoring and predatory auto-removal (#3081)

2026-04-20 23:28:03 +02:00

security

…

workflows

docs(ci): correct misleading Scorecard comment on pre-commit install (#4341)

2026-05-25 15:26:25 +02:00

actionlint.yaml

…

BRANCH_PROTECTION.md

…

CODEOWNERS

feat(ci): auto-apply triage labels on PR open and review (2/5) (#3858)

2026-05-09 15:57:04 +02:00

dependabot.yml

chore(deps): cover audited test dirs in dependabot config (#3913)

2026-05-09 11:57:04 +02:00

FUNDING.yml

…

FUZZING.md

…

labels.yml

ci(labels): add test:ui-full-shards label + wrapper workflow (#4067)

2026-05-18 19:59:08 +02:00

release.yml

chore(release): remove dead alias and ghost label refs from release.yml (#3871)

2026-05-08 20:39:23 +02:00

SECURITY_ALERTS.md

fix(security): clear prerelease-docker.yml scan alerts (#7774, #7775, #7776) (#4223)

2026-05-23 09:43:34 +02:00

SECURITY_SCORECARD.md

…

sync-config.yml

…