chore: batch RSR compliance — SPDX headers, SHA-pin actions, forbid(u… #9
scorecard-enforcer.yml
on: push
scorecard
27s
check-critical
5s