Mohamed Boudra ed1943058a ci: gate nix-build on same-repo PRs only ...

scripts/update-nix.sh and scripts/fix-lockfile.mjs are executed from
the PR's checked-out tree. A fork PR can modify those scripts to run
arbitrary code on the runner. Same-repo PRs and push-to-main still
run; fork PRs skip the job entirely.

Closes #365.

2026-05-12 12:37:01 +07:00

..

ISSUE_TEMPLATE

chore: issue forms, PR template, contributor guidance (#864)

2026-05-10 12:32:22 +08:00

workflows

ci: gate nix-build on same-repo PRs only

2026-05-12 12:37:01 +07:00

FUNDING.yml

Create FUNDING.yml

2026-03-30 17:29:31 +08:00

PULL_REQUEST_TEMPLATE.md

chore: issue forms, PR template, contributor guidance (#864)

2026-05-10 12:32:22 +08:00