open-runtimes/executor

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a transparency and hygiene gap, although it is partly offset by the repository's security policy and workflow audit.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 13 action references are unpinned, leaving avoidable supply-chain exposure in build automation.