oat-sa/extension-tao-oauth

Security policycaution

The repository has no security policy, which leaves vulnerability reporting and response expectations less explicit.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkouts, script injection, or top-level write permissions. However, all seven action references are unpinned and a high-confidence medium-severity secrets-inherit finding affects the release workflow, creating a workflow-hygiene concern.