Tag: ci-cd

Tags can be moved, commit hashes can’t. One line in almost every workflow is a quiet supply-chain risk, and the fix takes a minute.