ci(lint-workflows): hash-pin pip install to close Sonar S8541/S8544 #7
kirill-abblixlint-workflows.yaml
on: pull_request
Block inline untrusted-input interpolation
6s
actionlint (schema + shellcheck)
3s