Garry Tan 2fd506a4e0 fix(ci): SHA-pin dependency-review; the secret gate fails closed without a report ... dependency-review.yml rode mutable refs (@v4 resolves to a BRANCH on that repo) inside the one workflow whose job is supply-chain hygiene — now commit-pinned like its siblings, with dependabot keeping the pins fresh. gate-secret-scan.mjs crashed with an unhandled EPIPE on oversize diffs (the designed report.oversize branch was unreachable: the scanner emits no JSON on refusal) — the pipe write now tolerates early exit and a missing report is an explicit fail-closed exit 1. Oversize + broken-scanner legs pinned.		2026-08-14 17:15:48 -07:00
..
gate-secret-scan.mjs	fix(ci): SHA-pin dependency-review; the secret gate fails closed without a report	2026-08-14 17:15:48 -07:00