CI security: auto-pin per-workflow GITHUB_TOKEN permissions

CI security: auto-pin per-workflow GITHUB_TOKEN permissions targets a $4.0B = 1,000,000 orgs using GitHub Actions x $4,000 ACV (developer-security & CI compliance tooling) total addressable market with medium saturation and a year-over-year growth rate of 25% YoY adoption growth for CI/CD security tooling and supply-chain security products.

Key trends driving demand: Supply-chain security -- Frequent high-impact attacks increase demand for tooling that reduces blast radius of CI credentials.; GitHub Actions adoption -- As more orgs centralize CI on GitHub, per-repo/ per-workflow misconfigurations become a scalable addressable problem.; Compliance as code -- Scorecards and automated audits are becoming procurement gates for enterprise buyers, creating demand for automated remediation.; Automation-first fixes -- Organizations prefer automated PR-based remediations over manual guidance, increasing conversion for GitHub-integrated apps..