fix: pin Trivy action to SHA, accept documented risk for moderate advisories#337

Closed

itsmiso-ai wants to merge 5 commits into

mainfrom

fix/dependency-advisories

Commits on Jun 8, 2026

feat(sync): share sync locking across all sync entry-points
Saffron Worker
committed

Commits on Jun 9, 2026

Harden PR follow-up ingestion auth
Saffron Worker
committed
feat(api): add /api/issues/untriaged grooming intake endpoint
Saffron Worker
committed
chore: add .npmrc to ensure reproducible local validation
Saffron Worker
committed
fix: pin Trivy action to SHA, fix npmrc, accept documented risk for moderate advisories
Saffron Worker
committed