Skip to content

test: detect Guard workflow bypass signals - #14

Closed
vladzdev wants to merge 1 commit into
mainfrom
codapult-guard/workflow-bypass-signals
Closed

vladzdev wants to merge 1 commit into
mainfrom
codapult-guard/workflow-bypass-signals

Conversation

@vladzdev

@vladzdev vladzdev commented Nov 1, 2026

Copy link
Copy Markdown
Member

Hosted CI-integrity test for Guard 0.12.0. The PR adds continue-on-error to the verifier step, removes --policy-base from the invocation, and changes both pinned upload-artifact refs from v5.0.0 to v7.0.2. Expected: CI integrity reports a weakened/modified workflow, host review is required, and no in-toto statement is produced. This test branch will not be merged.

@vladzdev

vladzdev commented Nov 1, 2026

Copy link
Copy Markdown
Member Author

Hosted validation for @codapult/guard@0.12.0 is complete. Closing this temporary test PR without merging.

@vladzdev vladzdev closed this Nov 1, 2026
@vladzdev
vladzdev deleted the codapult-guard/workflow-bypass-signals branch November 1, 2026 09:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant