[workflow-audit] 3 unexplained change(s) on 2026-08-19

[github-actions]

3 unexplained commit(s) touching .github/workflows/ or .config/tend.yaml since 2026-08-18T07:48:55Z.

Routine Renovate pin bumps and reproducible tend regenerations are
classified and omitted — see the run summary for what was skipped.
Everything below needs a human to account for it.

1881a84 — security(audit): scrub the report too, retitle upward, fail closed

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-08-18 10:39:19 -0700
• Refs: main,remotes/origin/docs/running-tend-credential-environments remotes/origin/fix/pocket-close-dead-guard,remotes/origin/main
• Files:
  • .github/workflows/security-audit.yaml
• View diff

32cdb48 — security(audit): redact the transcript, and carry the verdict to the issue

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-08-18 10:23:18 -0700
• Refs: main,remotes/origin/docs/running-tend-credential-environments remotes/origin/fix/pocket-close-dead-guard,remotes/origin/main
• Files:
  • .github/workflows/security-audit.yaml
• View diff

d91d18e — security(audit): archive the transcript, separate INCONCLUSIVE from FAIL

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-08-18 08:38:06 -0700
• Refs: main,remotes/origin/docs/running-tend-credential-environments remotes/origin/fix/pocket-close-dead-guard,remotes/origin/main
• Files:
  • .github/workflows/security-audit.yaml
• View diff