[svcnemo-autobot]

Background

Copy #307 at pinned source head 5f6a8b897d9b1deaaf2e37aa4b7408cd74b430a1 onto main.

What changed

Switch code-freeze authentication to the GitHub App and update the shared workflow pin.

Details

Both source commits retain cherry-pick provenance. Only .github/workflows/release-freeze.yml differs; its final blob matches the pinned source.

flowchart LR
  Dispatch --> Wrapper[Code-freeze wrapper]
  Wrapper --> Shared[Pinned shared workflow]
  App[GitHub App credentials] --> Shared

Loading

Tested

• Native changed-file pre-commit completed; Python/type/Markdown hooks skipped by their own filters.
• Diff whitespace, source identity, signatures, signoffs, and remote head verified.
• Product/GPU tests excluded: product/dependency inputs unchanged.
• actionlint unavailable due denied asset access. Required CI and secret-plumbing approval pending.

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[svcnvidia-nemo-ci]

/ok to test 206fd76

[greptile-apps]

Confidence Score: 5/5

[Critical impact] The available changes appear safe to merge; no concrete defect was found.

Summary

Updates code-freeze authentication to pass GitHub App credentials to a newly pinned shared workflow.

• Code-freeze runs through the GitHub App now.

No actionable issues found in the available code. The pinned shared workflow and live credential setup were not verified. No workflow run was performed.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  Dispatch[Manual dispatch] --> Wrapper[Code-freeze workflow]
  Credentials[GitHub App ID and key] --> Wrapper
  Wrapper --> Shared[Pinned shared workflow]
  Environment[public environment input] --> Shared

Loading

_{Reviews (1) · Last reviewed commit: "ci(code-freeze): pin merged github app w..." · Reviewed by Greptile}