Evan Lezar 2ffc3d2b4d ci: require accepted issues for community pull requests (#4340) ...

Evaluate issue acceptance using trusted default-branch code and the PR author's repository permissions. Report the native workflow job result, protect enforcement files, and align PR creation and review guidance.

Closes #4339

Signed-off-by: Evan Lezar <elezar@nvidia.com>

2026-10-13 11:44:44 +00:00

..

branch-checks.yml

ci(release): add advisory compatibility review (#4200)

2026-10-07 14:12:05 +00:00

branch-docs.yml

docs: keep page URLs aligned with file paths (#3713)

2026-09-28 02:08:54 +00:00

branch-e2e.yml

test(tmachine): add a K3s HA conformance lane with PostgreSQL and mTLS (#4081)

2026-10-12 21:21:12 +00:00

build-binaries.yml

test(conformance): run driver suites with cargo (#3866)

2026-10-12 15:35:03 +00:00

build-images.yml

ci: consolidate multi-platform image builds (#3408)

2026-09-17 13:46:31 +00:00

build-rpm.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

build-vm-driver.yml

fix(vm): codesign macOS driver-vm with hypervisor entitlement in CI (#3507)

2026-10-02 16:09:09 +00:00

cargo-deny.yml

ci: pin CI images by digest and add native architecture smoke checks (#4114)

2026-10-02 16:22:27 +00:00

ci-image.yml

chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 (#2573)

2026-07-31 22:40:45 +00:00

codeql.yml

ci(security): orchestrate security scans with severity gating (#3255)

2026-09-11 10:26:56 +00:00

codex-compatibility.yml

ci(release): add advisory compatibility review (#4200)

2026-10-07 14:12:05 +00:00

codex-security.yml

fix(ci): retain sanitized Codex scan diagnostics on failure (#4304)

2026-10-07 23:25:28 +00:00

dco.yml

fix(dco): Fix mismatched wording that breaks initial DCO checks (#2399)

2026-07-21 21:02:37 +00:00

deb-package.yml

ci: pin CI images by digest and add native architecture smoke checks (#4114)

2026-10-02 16:22:27 +00:00

dependency-review.yml

ci(security): add informational security checks (#2930)

2026-08-27 13:32:16 +00:00

e2e-docker-test.yml

test(conformance): run driver suites with cargo (#3866)

2026-10-12 15:35:03 +00:00

e2e-gpu-test.yaml

test(conformance): run driver suites with cargo (#3866)

2026-10-12 15:35:03 +00:00

e2e-kubernetes-test.yml

test(conformance): run driver suites with cargo (#3866)

2026-10-12 15:35:03 +00:00

e2e-label-help.yml

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

e2e-podman-test.yml

test(conformance): run driver suites with cargo (#3866)

2026-10-12 15:35:03 +00:00

e2e-vm-test.yml

test(conformance): run driver suites with cargo (#3866)

2026-10-12 15:35:03 +00:00

helm-lint.yml

ci: pin CI images by digest and add native architecture smoke checks (#4114)

2026-10-02 16:22:27 +00:00

integration-runner.yml

test(tmachine): add a K3s HA conformance lane with PostgreSQL and mTLS (#4081)

2026-10-12 21:21:12 +00:00

integration-test.yml

test(tmachine): add a K3s HA conformance lane with PostgreSQL and mTLS (#4081)

2026-10-12 21:21:12 +00:00

issue-triage.yml

chore(ci): pin all GitHub Actions to SHA digests (#1233)

2026-05-18 22:36:48 -07:00

maintainer-approval.yml

feat(ci): gate merges on maintainer approval via a silent status check (#3176)

2026-10-09 17:22:15 +00:00

maintainers-change-alert.yml

feat(ci): gate merges on maintainer approval via a silent status check (#3176)

2026-10-09 17:22:15 +00:00

package-release-binaries.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

pr-issue-acceptance.yml

ci: require accepted issues for community pull requests (#4340)

2026-10-13 11:44:44 +00:00

prepare-integration-inputs.yml

fix(ci): retry Nix shell and app dependency preparation (#4066)

2026-10-02 11:27:20 +00:00

publish-docs-website.yml

feat(docs): publish versioned release snapshots (#3149)

2026-09-09 23:34:34 +00:00

release-auto-tag.yml

ci(release): advance seeded prereleases daily at Zurich time (#3239)

2026-09-16 08:48:18 +00:00

release-canary.yml

fix(docs): use lowercase "snap" as it is not a proper noun (#4387)

2026-10-12 19:02:26 +00:00

release-dev.yml

test(tmachine): add a K3s HA conformance lane with PostgreSQL and mTLS (#4081)

2026-10-12 21:21:12 +00:00

release-tag.yml

test(tmachine): add a K3s HA conformance lane with PostgreSQL and mTLS (#4081)

2026-10-12 21:21:12 +00:00

release-vm-kernel.yml

ci: pin CI images by digest and add native architecture smoke checks (#4114)

2026-10-02 16:22:27 +00:00

required-ci-gates.yml

fix(ci): publish merge queue E2E statuses (#4370)

2026-10-09 12:38:37 +00:00

rpm-package.yml

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

security-scan.yml

ci(security): stage release finding enforcement (#3552)

2026-09-22 17:21:23 +00:00

snap-package.yml

fix(ci): gate tagged publication on qualification (#4198)

2026-10-05 14:00:00 +00:00

snap-publish.yml

fix(ci): gate tagged publication on qualification (#4198)

2026-10-05 14:00:00 +00:00

stale.yml

chore(ci): close stale issues after 14 additional days (#3985)

2026-10-12 22:15:42 +00:00

sync-docs.yml

chore(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#2767)

2026-10-12 23:11:36 +00:00

trivy-changes.yml

fix(ci): retry Nix shell and app dependency preparation (#4066)

2026-10-02 11:27:20 +00:00

trivy-scan.yml

fix(ci): retry Nix shell and app dependency preparation (#4066)

2026-10-02 11:27:20 +00:00

vouch-check.yml

chore(ci): pin all GitHub Actions to SHA digests (#1233)

2026-05-18 22:36:48 -07:00

vouch-command.yml

ci(vouch): close approved request discussions (#2929)

2026-08-26 06:31:42 +00:00

windows-msvc.yml

ci(windows): seed caches on windows branch (#3576)

2026-09-22 21:12:05 -07:00

workflow-security.yml

fix(ci): retry Nix shell and app dependency preparation (#4066)

2026-10-02 11:27:20 +00:00