@aws-cdk/asset-awscli-v1

Repo bus factorcaution

All recent commits came from one contributor, creating a real continuity risk; organizational ownership partly offsets this, but no second active contributor is shown.

Workflow auditcaution

All workflows were analyzed and jobs scope permissions, with no untrusted checkout or script-injection counts. However, 92 of 93 action references are unpinned, and the high-confidence template-injection finding is a workflow hygiene concern even though its trigger and sink are not shown to coincide.