chore(claude): tighten skill allowed-tools — replace bare Bash with p… #1555

	name: ⚡ CI

	# Dependencies:
	# - SocketDev/socket-registry/.github/workflows/ci.yml

	on:
	push:
	branches: [main]
	tags: ['*']
	pull_request:
	branches: [main]
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	ci:
	name: Run CI Pipeline
	uses: SocketDev/socket-registry/.github/workflows/ci.yml@85a2fc0d33af6304246620365de3e7f053035a8d # main
	with:
	test-script: 'pnpm exec vitest --config .config/vitest.config.mts run'

	test-isolated:
	name: Test (Isolated)
	needs: ci
	runs-on: ubuntu-latest
	timeout-minutes: 10
	steps:
	- uses: SocketDev/socket-registry/.github/actions/setup-and-install@85a2fc0d33af6304246620365de3e7f053035a8d # main

	- name: Build project
	run: pnpm run build

	- name: Run isolated tests
	run: pnpm exec vitest --config .config/vitest.config.isolated.mts run

Provide feedback