Jim Meyer a45dedd932 ci: validate workflow references against policy ...

Signed-off-by: Jim Meyer <jimeyer@nvidia.com>

2026-09-23 09:51:00 -07:00

..

branch-checks.yml

ci(rust): parallelize branch checks (#3462)

2026-09-22 08:35:42 +00:00

branch-docs.yml

chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#2381)

2026-07-21 12:57:18 +00:00

branch-e2e.yml

ci(e2e): run the Kubernetes HA and credential-driver suites on test:e2e-kubernetes (#3626)

2026-09-23 15:47:35 +00:00

build-binaries.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

build-images.yml

ci: consolidate multi-platform image builds (#3408)

2026-09-17 13:46:31 +00:00

build-rpm.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

build-vm-driver.yml

ci: consolidate release binary builds (#3405)

2026-09-17 12:09:42 +00:00

cargo-deny.yml

ci(security): orchestrate security scans with severity gating (#3255)

2026-09-11 10:26:56 +00:00

ci-image.yml

chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 (#2573)

2026-07-31 22:40:45 +00:00

codeql.yml

ci(security): orchestrate security scans with severity gating (#3255)

2026-09-11 10:26:56 +00:00

codex-security.yml

ci(security): gate tagged releases on scans (#3523)

2026-09-21 18:51:37 +00:00

dco.yml

fix(dco): Fix mismatched wording that breaks initial DCO checks (#2399)

2026-07-21 21:02:37 +00:00

deb-package.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

dependency-review.yml

ci(security): add informational security checks (#2930)

2026-08-27 13:32:16 +00:00

e2e-docker-test.yml

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

e2e-gpu-test.yaml

test(e2e): run conformance in gateway lanes (#2925)

2026-09-01 12:36:51 +00:00

e2e-kubernetes-test.yml

feat(kubernetes): support HA gateway rebalancing (#1868)

2026-09-21 21:22:12 +00:00

e2e-label-help.yml

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

e2e-podman-test.yml

test(tmachine): migrate Keycloak provider refresh coverage (#3404)

2026-09-18 13:56:07 +02:00

e2e-vm-test.yml

test(e2e): run conformance in gateway lanes (#2925)

2026-09-01 12:36:51 +00:00

helm-lint.yml

chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#2381)

2026-07-21 12:57:18 +00:00

integration-runner.yml

test(tmachine): add Debian installer profile (#3461)

2026-09-21 12:17:11 +02:00

integration-test.yml

refactor(tmachine): separate installers from environments (#3419)

2026-09-18 12:59:20 +00:00

issue-triage.yml

chore(ci): pin all GitHub Actions to SHA digests (#1233)

2026-05-18 22:36:48 -07:00

package-release-binaries.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

prepare-integration-inputs.yml

test(tmachine): add Debian installer profile (#3461)

2026-09-21 12:17:11 +02:00

publish-docs-website.yml

feat(docs): publish versioned release snapshots (#3149)

2026-09-09 23:34:34 +00:00

release-auto-tag.yml

ci(release): advance seeded prereleases daily at Zurich time (#3239)

2026-09-16 08:48:18 +00:00

release-canary.yml

fix(ci)!: remove gateway callback listener dependency (#3365)

2026-09-18 20:55:55 +00:00

release-dev.yml

test(tmachine): add Debian installer profile (#3461)

2026-09-21 12:17:11 +02:00

release-tag.yml

fix(ci): use approved setup-oras revision (#3625)

2026-09-23 15:35:08 +00:00

release-vm-kernel.yml

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

required-ci-gates.yml

feat(ci): introduce merge queue (#2024)

2026-07-16 00:03:52 +02:00

rpm-package.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

security-scan.yml

ci(security): stage release finding enforcement (#3552)

2026-09-22 17:21:23 +00:00

snap-package.yml

ci(release): publish prerelease artifacts (#3093)

2026-09-01 15:31:18 +00:00

stale.yml

ci(stale): increase stale workflow processing budget (#2979)

2026-08-27 12:07:15 +00:00

sync-docs.yml

feat(docs): publish versioned release snapshots (#3149)

2026-09-09 23:34:34 +00:00

trivy-changes.yml

fix(ci): align Trivy change detection and scan baselines (#3277)

2026-09-11 10:55:52 +00:00

trivy-scan.yml

ci(security): orchestrate security scans with severity gating (#3255)

2026-09-11 10:26:56 +00:00

vouch-check.yml

chore(ci): pin all GitHub Actions to SHA digests (#1233)

2026-05-18 22:36:48 -07:00

vouch-command.yml

ci(vouch): close approved request discussions (#2929)

2026-08-26 06:31:42 +00:00

windows-msvc.yml

ci(windows): seed caches on windows branch (#3576)

2026-09-22 21:12:05 -07:00

workflow-policy-request.yml

ci: validate workflow references against policy

2026-09-23 09:51:00 -07:00

workflow-policy.yml

ci: validate workflow references against policy

2026-09-23 09:51:00 -07:00

workflow-security.yml

ci(security): orchestrate security scans with severity gating (#3255)

2026-09-11 10:26:56 +00:00