security(workflow-audit): report the unexplained, not the routine - #377

Merged

nedtwigg merged 7 commits into

mainfrom

security/workflow-audit-classify

Aug 16, 2026

Commits on Aug 15, 2026

security(workflow-audit): report the unexplained, not the routine

nedtwigg
and
claude
committed
8494b9e
security(workflow-audit): correct the Renovate evidence claim, guard the tend config

nedtwigg
and
claude
committed
9233c8a
security(workflow-audit): align the file header, declare pull-requests: read

nedtwigg
and
claude
committed
84003ef
security(workflow-audit): put .config/tend.yaml in the audit window

nedtwigg
and
claude
committed
7793ec5

Commits on Aug 16, 2026

security(workflow-audit): mirror the config guard into the Renovate arm

nedtwigg
and
claude
committed
4843794
security(workflow-audit): verify Renovate provenance
nedtwigg
committed
280632f
Update .github/workflows/workflow-audit.yaml

nedtwigg
and
dormouse-bot
authored
f38e4bd