fix: secure workflows with pinned actions and npm ci#1590

Merged

gcatanese merged 7 commits into

mainfrom

copilot/fix-automated-commits-security

Dec 19, 2025

Commits on Dec 19, 2025

fix: use npm ci with package-lock.json and keep direct push

Copilot
and
gcatanese
committed
fix: use npm ci consistently across all workflows

Copilot
and
gcatanese
committed