Skip to content

release: promote dev to stable (release-workflows v1.0.0) #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
en0f merged 6 commits into from
Oct 29, 2026
Merged

release: promote dev to stable (release-workflows v1.0.0) #2

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
e1f4111
chore: pin CLA at the provenance check (CLA#12 31d7219), grant check …
pjhartlieb Oct 21, 2026
702b16f
ci(dev-security): pin zizmor 1.15.2 and block on medium and above
pjhartlieb Oct 21, 2026
a3fce77
Merge pull request #1 from blacklanternsecurity/rehearsal/pin-31d7219
pjhartlieb Oct 21, 2026
7b808c9
Merge stable into b1/release-workflows-v1.0.0
pjhartlieb Oct 29, 2026
0c312e3
Pin release-workflows v1.0.0 and map the release key
pjhartlieb Oct 29, 2026
2777f06
Merge pull request #4 from blacklanternsecurity/b1/release-workflows-…
pjhartlieb Oct 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .github/workflows/dev-security.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,3 +35,8 @@ jobs:
- uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
with:
advanced-security: false
# Pinned, so the gate's verdict changes only when we change it. The action defaults to the
# newest zizmor, which can add audits overnight.
version: "1.15.2"
# Block on real problems; low-severity findings are style and would train people to ignore the gate.
min-severity: medium
9 changes: 7 additions & 2 deletions .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,10 @@ jobs:
permissions:
contents: read
actions: read
uses: blacklanternsecurity/CLA/.github/workflows/release-check.yml@6fc2cf5fe9b8458452c494e8f3285d4aa250e076 # fix/release-on-stable (rehearsal)
pull-requests: read
uses: blacklanternsecurity/release-workflows/.github/workflows/release-check.yml@c53c202eedeb26a86088936363e6cb06ce99ac15 # v1.0.0
secrets:
BLS_RELEASE_PRIVATE_KEY: ${{ secrets.BLS_RELEASE_PRIVATE_KEY }}

tests:
needs: check
Expand Down Expand Up @@ -63,9 +66,11 @@ jobs:
if: needs.check.outputs.release == 'true'
permissions:
contents: read
uses: blacklanternsecurity/CLA/.github/workflows/publish.yml@6fc2cf5fe9b8458452c494e8f3285d4aa250e076 # fix/release-on-stable (rehearsal)
uses: blacklanternsecurity/release-workflows/.github/workflows/publish.yml@c53c202eedeb26a86088936363e6cb06ce99ac15 # v1.0.0
with:
version: ${{ needs.check.outputs.version }}
tag: ${{ needs.check.outputs.tag }}
artifacts: dist
assets: dist/*
secrets:
BLS_RELEASE_PRIVATE_KEY: ${{ secrets.BLS_RELEASE_PRIVATE_KEY }}
Loading