Andrew Rabert d546cd9d4e Isolate PR build from secrets and token permissions ...

Extract build steps to reusable __build.yml workflow. Call it from
build.yml with permissions: {} to prevent untrusted PR code from
accessing GITHUB_TOKEN. Secrets not passed to reusable workflow.

2025-12-30 23:32:34 -05:00

..

workflows

Isolate PR build from secrets and token permissions

2025-12-30 23:32:34 -05:00

CODEOWNERS

Add Team-Member Donation Page (#1557)

2025-09-24 18:46:07 +00:00

pull_request_template.md

Add documentation policies page & PR template (#1594)

2025-10-13 13:33:34 -04:00

renovate.json

Migrate config .github/renovate.json (#1371)

2025-04-18 10:59:02 -04:00