PARENT

Use the commit that the remote default branch (origin/master or origin/main) points to — i.e. the last fetched commit on the remote before the local STIG analysis branch diverged.

Resolved by reading the local git ref refs/remotes/origin/master (or …/main). No external process is invoked, so this is safe for Gradle's configuration cache. Falls back to HEAD when neither remote tracking ref can be resolved.

Useful when the local checkout is on a STIG analysis branch whose commits have not been pushed — generated links point at a commit that the remote can actually serve.