Skip to content

Tighten workflow identity and credentials - #7

Merged
KuGouGo merged 1 commit into
mainfrom
codex/runtime-review
Jul 14, 2026
Merged

Tighten workflow identity and credentials#7
KuGouGo merged 1 commit into
mainfrom
codex/runtime-review

Conversation

@KuGouGo

@KuGouGo KuGouGo commented Jul 14, 2026

Copy link
Copy Markdown
Owner

Summary

  • bind release-candidate manifests to the actual checked-out PR merge commit
  • prevent checkout from persisting credentials in build and publish jobs
  • document PR and main source identity semantics

Validation

  • YAML syntax check
  • PATH=/opt/homebrew/bin:$PATH REQUIRE_SHELLCHECK=1 make preflight
  • 23/23 test suites passed

@KuGouGo
KuGouGo merged commit c4ba56b into main Jul 14, 2026
2 checks passed
@KuGouGo
KuGouGo deleted the codex/runtime-review branch July 14, 2026 19:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant