ci: harden welcome.yml and silence zizmor dangerous-triggers#908

Merged

drbenvincent merged 2 commits into

pymc-labs:mainfrom

anevolbap:issue-888-zizmor-welcome-workflow

Jun 10, 2026

Commits on Jun 9, 2026

ci: harden welcome.yml and document pull_request_target use
anevolbap
committed

Commits on Jun 10, 2026

Merge origin/main into issue-888-zizmor-welcome-workflow, keeping bot-skip guard from #956 alongside permissions/env hardening

drbenvincent
and
cursoragent
committed