Skip to content

ci: require exact main commit for release candidates - #25

Merged
ultronstudio merged 2 commits into
mainfrom
fix/0.0.7-rc-exact-commit
Oct 24, 2026
Merged

ultronstudio merged 2 commits into
mainfrom
fix/0.0.7-rc-exact-commit

Conversation

@ultronstudio

Copy link
Copy Markdown
Owner

Summary

  • Require RC workflow dispatch from main.
  • Require a full lowercase 40-character SHA and match it against both github.sha and checked-out HEAD.
  • Pass the validated commit SHA to GitHub pre-release creation.
  • Record the resolution of PVK-007-AUDIT-001 in the audit report.

Validation

  • �ctionlint
  • git diff --check

No RC, tag, or release was created.

@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@ultronstudio
ultronstudio merged commit 1621819 into main Oct 24, 2026
40 checks passed
@ultronstudio
ultronstudio deleted the fix/0.0.7-rc-exact-commit branch October 24, 2026 09:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant