Skip to content

feat(security): retain consolidated gate evidence - #21

Merged
rldyourmnd merged 3 commits into
mainfrom
feat/security-bundle-evidence
Aug 22, 2026
Merged

rldyourmnd merged 3 commits into
mainfrom
feat/security-bundle-evidence

Conversation

@rldyourmnd

Copy link
Copy Markdown
Contributor

Summary

  • retain actionlint output plus Zizmor, OSV and fully redacted Gitleaks SARIF
  • upload the evidence on success or aggregate failure for one day
  • preserve one private placement and all four blocking gates
  • document the observability and failure-domain tradeoff

Verification

The repository's normal public GitHub-hosted fixture jobs are the runtime evidence. No private fleet run is created by this PR.

Signed-off-by: rldyourmnd <danil@nddev.it.com>
@github-actions github-actions Bot added ci and removed ci labels Aug 22, 2026
Signed-off-by: rldyourmnd <danil@nddev.it.com>
@github-actions github-actions Bot added ci and removed ci labels Aug 22, 2026
Signed-off-by: rldyourmnd <danil@nddev.it.com>
@github-actions github-actions Bot added ci and removed ci labels Aug 22, 2026
@rldyourmnd
rldyourmnd marked this pull request as ready for review August 22, 2026 10:41
@rldyourmnd
rldyourmnd merged commit b52dc82 into main Aug 22, 2026
28 checks passed
@rldyourmnd
rldyourmnd deleted the feat/security-bundle-evidence branch August 23, 2026 16:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant