neo773 565995e715 security: harden CI against supply-chain attacks (#20476) ...

- Pin all third-party actions to SHA
- Gate claude.yml triggers to internal authors with Harden-Runner egress
audit
- Ignore fork-PR lifecycle scripts
- Narrow cross-repo dispatch payloads
- Add 7d npm release-age gate
- Add CODEOWNERS on .github/** and .yarnrc.yml

---------

Co-authored-by: prastoin <paul@twenty.com>

2026-05-12 12:20:29 +00:00

..

deploy-twenty-app

…

install-twenty-app

…

nx-affected

…

restore-cache

…

save-cache

…

spawn-twenty-app-dev-test

…

spawn-twenty-docker-image

…

yarn-install

…