Repository navigation

ci: drop secrets: inherit where unused; explicit mirror secrets; scorecard actions: read #662

Job	Run time
governance / Allowlist Preflight	6s
governance / Language / package anti-pattern policy	9s
governance / UUID v7 conformance	6s
governance / UUID v8 conformance	6s
governance / Live Actions policy (credentialed advisory)	5s
governance / Check Workflow Staleness	9s
governance / Debt ratchet	7s
governance / Exemption ratchet	7s
governance / Licence consistency	6s
governance / Code quality + docs	6s
governance / Actions lockfile verify	9s
governance / JS runtimes — pnpm	3s
governance / JS runtimes — environment provisions Bun first	25s
governance / Workflow security linter	7s
governance / Security policy checks	4s
governance / Trusted-base reduction policy	7s
governance / Well-Known (RFC 9116 + RSR)	6s
governance / Guix packaging policy (Nix retired)	7s
governance / JS runtimes — bun	5s
governance / JS runtimes — deno	4s
governance / Validate Hypatia Baseline	2s
	2m 26s