Matthew Grossman 8bcf1e1e73 ci(release): verify the provenance of dispatched snap artifacts ...

A manual snap upload now requires artifact-run-id to be this repository's
publishing workflow for the channel, and stable snaps must match the GitHub
Release asset digests. A skipped stable upload now reports a notice.

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

2026-10-27 16:44:18 -07:00

..

actions

chore(ci): update rust-cache to include upstream fixes (#4748)

2026-10-26 13:53:37 +00:00

codeql

ci(codeql): run nightly scans on main (#3007)

2026-08-28 13:26:39 +00:00

DISCUSSION_TEMPLATE

ci(vouch): close approved request discussions (#2929)

2026-08-26 06:31:42 +00:00

ISSUE_TEMPLATE

chore(agents): simplify contributor instructions and workflows (#3987)

2026-10-01 16:20:35 +00:00

prompts

ci(compatibility): review driver-facing executable flags (#4644)

2026-10-21 00:02:55 +00:00

workflows

ci(release): verify the provenance of dispatched snap artifacts

2026-10-27 16:44:18 -07:00

actionlint-matcher.json

ci(security): add informational security checks (#2930)

2026-08-27 13:32:16 +00:00

actionlint-sarif-template.txt

ci(security): add informational security checks (#2930)

2026-08-27 13:32:16 +00:00

actionlint.yml

ci(security): add informational security checks (#2930)

2026-08-27 13:32:16 +00:00

CODEOWNERS

ci: require accepted issues for community pull requests (#4340)

2026-10-13 11:44:44 +00:00

copy-pr-bot.yaml

fix(ci): restore repository permission vetters (#3875)

2026-09-29 18:05:21 +00:00

dependabot.yml

chore(ci): enable Dependabot for GitHub Actions with 48h cooldown (#1188)

2026-05-06 09:16:14 -07:00

PULL_REQUEST_TEMPLATE.md

docs(contributing): exempt build and flaky-test fixes from the issue requirement (#4875)

2026-10-23 14:40:13 +00:00

VOUCHED.td

chore: add vouch system for first-time contributors (#375)

2026-03-16 15:06:50 -07:00

zizmor.yml

ci: require accepted issues for community pull requests (#4340)

2026-10-13 11:44:44 +00:00