TIL: Aug 2

TIL: Hardening CI/CD security requires explicitly disabling persist-credentials in actions/checkout and enforcing strict permissions blocks for each job to adhere to the principle of least privilege. Combining this with automated Gitleaks redaction and gate-keeping npm audit ensures both supply-chain integrity and proactive secret exposure prevention.