Repository navigation

ci: every checkout turns the job's token off, and a guard asks each one #439

Job	Run time
import table of the window binary	1m 0s
semgrep	41s
linters	3m 42s
test on macos-latest	7m 18s
bill of materials	3m 10s
staticcheck	3m 27s
test on ubuntu-latest	5m 51s
coverage gate	9m 24s
known vulnerabilities	2m 40s
test on windows-latest	8m 29s
reference tools actually installed	59s
what this push touched	6s
fuzzing with a time budget	0s
race detector	0s
	46m 47s