Simon Scatton 05050a6d64 refactor(ci): extract release qualification and serialize Codex reviews (#4419) ...

* refactor(ci): extract release qualification and serialize Codex reviews

Signed-off-by: Simon Scatton <sscatton@nvidia.com>

* fix(ci): queue Codex reviews without security ordering

Signed-off-by: Simon Scatton <sscatton@nvidia.com>

* fix(ci): retain qualification evidence after build failures

Signed-off-by: Simon Scatton <sscatton@nvidia.com>

* docs(ci): shorten compatibility review guidance

Signed-off-by: Simon Scatton <sscatton@nvidia.com>

---------

Signed-off-by: Simon Scatton <sscatton@nvidia.com>

2026-10-15 13:46:33 +00:00

..

branch-checks.yml

ci(compatibility): require explicit risk acceptance (#4595)

2026-10-15 13:01:11 +00:00

branch-docs.yml

docs: keep page URLs aligned with file paths (#3713)

2026-09-28 02:08:54 +00:00

branch-e2e.yml

test(oci): add a shared Docker and Podman suite for image USER and WORKDIR (#3931)

2026-10-13 13:00:59 +00:00

build-binaries.yml

test(conformance): run driver suites with cargo (#3866)

2026-10-12 15:35:03 +00:00

build-images.yml

ci: consolidate multi-platform image builds (#3408)

2026-09-17 13:46:31 +00:00

build-rpm.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

build-vm-driver.yml

fix(vm): codesign macOS driver-vm with hypervisor entitlement in CI (#3507)

2026-10-02 16:09:09 +00:00

cargo-deny.yml

ci: pin CI images by digest and add native architecture smoke checks (#4114)

2026-10-02 16:22:27 +00:00

ci-image.yml

chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 (#2573)

2026-07-31 22:40:45 +00:00

codeql.yml

chore(deps): bump github/codeql-action/init from 4.37.7 to 4.37.9 (#3002)

2026-10-14 20:05:25 +00:00

codex-compatibility.yml

refactor(ci): extract release qualification and serialize Codex reviews (#4419)

2026-10-15 13:46:33 +00:00

codex-security.yml

refactor(ci): extract release qualification and serialize Codex reviews (#4419)

2026-10-15 13:46:33 +00:00

dco.yml

fix(dco): Fix mismatched wording that breaks initial DCO checks (#2399)

2026-07-21 21:02:37 +00:00

deb-package.yml

ci: pin CI images by digest and add native architecture smoke checks (#4114)

2026-10-02 16:22:27 +00:00

dependency-review.yml

ci(security): add informational security checks (#2930)

2026-08-27 13:32:16 +00:00

e2e-docker-test.yml

test(oci): add a shared Docker and Podman suite for image USER and WORKDIR (#3931)

2026-10-13 13:00:59 +00:00

e2e-gpu-test.yaml

test(conformance): run driver suites with cargo (#3866)

2026-10-12 15:35:03 +00:00

e2e-kubernetes-test.yml

test(conformance): run driver suites with cargo (#3866)

2026-10-12 15:35:03 +00:00

e2e-label-help.yml

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

e2e-podman-test.yml

test(conformance): run driver suites with cargo (#3866)

2026-10-12 15:35:03 +00:00

e2e-vm-test.yml

test(conformance): run driver suites with cargo (#3866)

2026-10-12 15:35:03 +00:00

helm-lint.yml

ci: pin CI images by digest and add native architecture smoke checks (#4114)

2026-10-02 16:22:27 +00:00

integration-runner.yml

test(tmachine): add a K3s HA conformance lane with PostgreSQL and mTLS (#4081)

2026-10-12 21:21:12 +00:00

integration-test.yml

test(tmachine): add a K3s HA conformance lane with PostgreSQL and mTLS (#4081)

2026-10-12 21:21:12 +00:00

issue-triage.yml

chore(ci): pin all GitHub Actions to SHA digests (#1233)

2026-05-18 22:36:48 -07:00

maintainer-approval.yml

fix(ci): skip maintainer approval in merge queue (#4496)

2026-10-13 19:16:00 +00:00

maintainers-change-alert.yml

feat(ci): gate merges on maintainer approval via a silent status check (#3176)

2026-10-09 17:22:15 +00:00

package-release-binaries.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

pr-issue-acceptance.yml

ci: require accepted issues for community pull requests (#4340)

2026-10-13 11:44:44 +00:00

prepare-integration-inputs.yml

fix(ci): retry Nix shell and app dependency preparation (#4066)

2026-10-02 11:27:20 +00:00

publish-docs-website.yml

feat(docs): publish versioned release snapshots (#3149)

2026-09-09 23:34:34 +00:00

release-auto-tag.yml

ci(release): advance seeded prereleases daily at Zurich time (#3239)

2026-09-16 08:48:18 +00:00

release-canary.yml

fix(docs): use lowercase "snap" as it is not a proper noun (#4387)

2026-10-12 19:02:26 +00:00

release-dev.yml

chore(deps): bump actions/attest from 4.2.1 to 4.2.2 (#2625)

2026-10-14 20:05:08 +00:00

release-qualification.yml

refactor(ci): extract release qualification and serialize Codex reviews (#4419)

2026-10-15 13:46:33 +00:00

release-tag.yml

refactor(ci): extract release qualification and serialize Codex reviews (#4419)

2026-10-15 13:46:33 +00:00

release-vm-kernel.yml

chore(deps): bump actions/attest from 4.2.1 to 4.2.2 (#2625)

2026-10-14 20:05:08 +00:00

required-ci-gates.yml

fix(ci): publish merge queue E2E statuses (#4370)

2026-10-09 12:38:37 +00:00

rpm-package.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

security-scan.yml

ci(security): temporarily remove Codex from release scans (#4469)

2026-10-13 15:44:26 +00:00

snap-package.yml

fix(ci): gate tagged publication on qualification (#4198)

2026-10-05 14:00:00 +00:00

snap-publish.yml

fix(ci): gate tagged publication on qualification (#4198)

2026-10-05 14:00:00 +00:00

stale.yml

ci: replace stale issue exemptions with explicit frozen labels (#4534)

2026-10-14 14:23:44 +00:00

sync-docs.yml

chore(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#2767)

2026-10-12 23:11:36 +00:00

trivy-changes.yml

fix(ci): retry Nix shell and app dependency preparation (#4066)

2026-10-02 11:27:20 +00:00

trivy-scan.yml

chore(deps): bump github/codeql-action/upload-sarif (#4552)

2026-10-14 18:41:04 +00:00

vouch-check.yml

chore(ci): pin all GitHub Actions to SHA digests (#1233)

2026-05-18 22:36:48 -07:00

vouch-command.yml

ci(vouch): close approved request discussions (#2929)

2026-08-26 06:31:42 +00:00

windows-msvc.yml

ci(windows): seed caches on windows branch (#3576)

2026-09-22 21:12:05 -07:00

workflow-security.yml

chore(deps): bump github/codeql-action/upload-sarif (#4552)

2026-10-14 18:41:04 +00:00