ci: sign pkg catalogue commits as pfblockerng-bot - #32

Merged

andrebrait merged 7 commits into

mainfrom

issue/pkg-bot-git-signing

Sep 2, 2026

Commits on Sep 2, 2026

ci: sign pkg catalogue commits as pfblockerng-bot
andrebrait
committed
9d02b76
ci: do not treat the test job as a signed writer
andrebrait
committed
c469222
ci: disable setup-uv cache without a lockfile
andrebrait
committed
6862705
ci: refuse an unsigned catalogue commit, and prove the signature
andrebrait
committed
01b214e
tests: widen writer discovery and pin the real CI quadrant
andrebrait
committed
b8b34d9
tests: discover writers by shape, not by a listed pair
andrebrait
committed
db32f12
tests: verify the signature against the provisioned key
andrebrait
committed
574afbf