Skip to content

Add release artifact scanner gates to publish workflows#198

Draft
Oliver-Zimmerman wants to merge 5 commits into
mainfrom
tel-188-release-artifact-scanner
Draft

Add release artifact scanner gates to publish workflows#198
Oliver-Zimmerman wants to merge 5 commits into
mainfrom
tel-188-release-artifact-scanner

Conversation

@Oliver-Zimmerman
Copy link
Copy Markdown
Collaborator

Summary

  • add release artifact regression fixtures and gitleaks result normalization for scanner coverage
  • enforce pre-publish artifact scanning plus auditable publish gates in npm and PyPI release workflows
  • document manual override and operator flow for AI assistant release publishing

Verification

  • node --test tests/release-artifact-scanner.test.mjs tests/publish-npm.test.mjs

Context

  • Internal issue: TEL-188
  • Parent issue: TEL-106

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant