ci: note why SHA-pin enforcement is off at the OSV pin#109

kellenmurphy merged 1 commit into

mainkellenmurphy/samlguy:mainfrom

ci/osv-sha-pin-notekellenmurphy/samlguy:ci/osv-sha-pin-noteCopy head branch name to clipboard