Martin Vogel eb2e8d5963 Limit PR validation to the security gates ...

Pull requests run the security island only — static audit, license
gates, and the CodeQL gate plus the ci-ok summary; the full dry-run
chain (lint/test/build/smoke) stays maintainer-driven via
workflow_dispatch. The CodeQL gate now resolves the PR head SHA instead
of the synthetic merge commit so it can find the analysis run.

Signed-off-by: Martin Vogel <martin.vogel@datadice.io>

2026-06-12 15:57:08 +02:00

..

_build.yml

Bundle third-party notices into release archives; extend release tooling

2026-06-12 02:17:39 +02:00

_lint.yml

build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#418)

2026-06-07 02:31:25 +02:00

_security.yml

Limit PR validation to the security gates

2026-06-12 15:57:08 +02:00

_smoke.yml

Move Glama packaging into pkg/glama; drop redundant packaging/ dir

2026-06-09 13:57:12 +02:00

_soak.yml

build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#418)

2026-06-07 02:31:25 +02:00

_test.yml

build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#418)

2026-06-07 02:31:25 +02:00

codeql.yml

Run the full validation pipeline on pull requests

2026-06-12 15:57:08 +02:00

dco.yml

Adopt the Developer Certificate of Origin for all commits

2026-06-12 14:31:55 +02:00

dry-run.yml

Make the macOS Intel build leg blocking so darwin-amd64 always ships

2026-06-05 21:53:25 +02:00

nightly-soak.yml

Refactor CI: split monolith workflows into reusable components

2026-04-02 16:57:44 +02:00

pages.yml

ci: deploy Pages via Actions, scoped to docs changes (#425)

2026-06-08 18:26:11 +02:00

pr.yml

Limit PR validation to the security gates

2026-06-12 15:57:08 +02:00

release.yml

Pin the registry sync to the dispatched release version

2026-06-12 10:25:27 +02:00

scorecard.yml

build(deps): bump github/codeql-action from 4.36.0 to 4.36.2 (#419)

2026-06-07 02:31:27 +02:00