Merge pull request #40 from SolverForge/codex/fix-ci-vulnerability-for-untrusted-prs

Harden Forgejo CI: disable untrusted PR runs on self-hosted runner

Author: blackopsrepl

.forgejo/workflows/ci.yml

@@ -3,8 +3,7 @@ name: CI
 on:
   push:
     branches: [main, dev, release/*, feature/*]
-  pull_request:
-    branches: [main, dev, release/*]
+  workflow_dispatch:
 
 env:
   CARGO_TERM_COLOR: always