- Add minimal debug workflow to security-scanning.yml - Test actions/checkout@v4 vs manual git clone - Verify repository context before and after checkout - Add package.json detection and npm install test - Prepare manual clone fallback if checkout fails