ci: gate optional Claude and security-scan jobs behind repository variables #136
workflow-checks.yml
on: pull_request
Actionlint
11s
Zizmor
22s