Harden command execution in CI and tooling paths#16418

matthewp merged 4 commits into

mainwithastro/astro:mainfrom

semgrep-ci-execution-hardeningwithastro/astro:semgrep-ci-execution-hardeningCopy head branch name to clipboard