ci: close final release audit gaps - #25

Merged

xxvcc merged 1 commit into

mainfrom

fix/final-release-audit

Jul 27, 2026

xxvcc commented Jul 27, 2026

Owner

Summary

serialize and disable caching for every documented root integration run
scan all workflow extensions and contributor commands for unsafe integration invocations
record the release-key custody limitation and single-maintainer governance in v2.8.2

Validation

go test -count=1 -race ./...
go vet with normal and integration tags
fresh privileged Debian root integration suite
actionlint, zizmor, ShellCheck, govulncheck
mirror receiver tests
static amd64/arm64 builds


          ci: close final release audit gaps

27b86f7

xxvcc merged commit 23cad8c into main

8 checks passed

xxvcc deleted the fix/final-release-audit branch

July 27, 2026 13:04

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet