After squash merge, online zizmor correctly rejects the former branch-only helper commit as an impostor. Repin all six calls to the signed main merge commit containing byte-identical reviewed helpers. The actual online gate reproduces six HIGH findings before the change and passes afterward; actionlint passes. No helper behavior, security rule or suppression changes.
Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
james.maesandCodex