Files

T

dependabot[bot] 12fd87623a chore(deps): bump sigstore/cosign-installer from 3.8.2 to 4.0.0 (#1067 )

Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.8.2 to 4.0.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/3454372f43399081ed03b604cb2d021dabca52bb...faadad0cce49287aee09b3a48701e75088a2c6ad)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-02-20 04:39:29 -05:00

scripts

fix(workflow): align first-interaction input keys (#821 )

2026-02-18 22:24:51 +08:00

ci-run.yml

perf(ci): reduce GitHub Actions costs ~60-65% across all workflows

2026-02-18 21:14:47 -08:00

feature-matrix.yml

perf(ci): reduce GitHub Actions costs ~60-65% across all workflows

2026-02-18 21:14:47 -08:00

main-branch-flow.md

ci(docker): publish multi-arch latest and harden release tagging path

2026-02-19 19:32:18 +08:00

pr-auto-response.yml

fix(ci): restore broken YAML structure in 3 workflows, revert aggressive STALE_HOURS

2026-02-18 21:26:14 -08:00

pr-check-stale.yml

fix(ci): restore broken YAML structure in 3 workflows, revert aggressive STALE_HOURS

2026-02-18 21:26:14 -08:00

pr-check-status.yml

fix(ci): restore broken YAML structure in 3 workflows, revert aggressive STALE_HOURS

2026-02-18 21:26:14 -08:00

pr-intake-checks.yml

fix(ci): restore broken YAML structure in 3 workflows, revert aggressive STALE_HOURS

2026-02-18 21:26:14 -08:00

pr-label-policy-check.yml

chore(ci): align workflow names with file naming style (#723 )

2026-02-17 19:55:05 -05:00

pr-labeler.yml

perf(ci): reduce GitHub Actions costs ~60-65% across all workflows

2026-02-18 21:14:47 -08:00

pub-docker-img.yml

Merge pull request #847 from agorevski/algore/cicd-descript-release-matrix

2026-02-19 06:54:40 -08:00

pub-release.yml

chore(deps): bump sigstore/cosign-installer from 3.8.2 to 4.0.0 (#1067 )

2026-02-20 04:39:29 -05:00

README.md

chore(ci): externalize workflow scripts and relocate main flow doc (#722 )

2026-02-17 19:48:37 -05:00

sec-audit.yml

perf(ci): reduce GitHub Actions costs ~60-65% across all workflows

2026-02-18 21:14:47 -08:00

sec-codeql.yml

perf(ci): reduce GitHub Actions costs ~60-65% across all workflows

2026-02-18 21:14:47 -08:00

sync-contributors.yml

perf(ci): reduce GitHub Actions costs ~60-65% across all workflows

2026-02-18 21:14:47 -08:00

test-benchmarks.yml

perf(ci): reduce GitHub Actions costs ~60-65% across all workflows

2026-02-18 21:14:47 -08:00

test-e2e.yml

chore(ci): align workflow names with file naming style (#723 )

2026-02-17 19:55:05 -05:00

test-fuzz.yml

chore(ci): align workflow names with file naming style (#723 )

2026-02-17 19:55:05 -05:00

test-rust-build.yml

chore(ci): align workflow names with file naming style (#723 )

2026-02-17 19:55:05 -05:00

workflow-sanity.yml

ci(workflows): split label policy checks from workflow sanity (#559 )

2026-02-17 11:26:54 -05:00

README.md

Workflow Directory Layout

GitHub Actions only loads workflow entry files from:

.github/workflows/*.yml
.github/workflows/*.yaml

Subdirectories are not valid locations for workflow entry files.

Repository convention:

Keep runnable workflow entry files at .github/workflows/ root.
Keep workflow-only helper scripts under .github/workflows/scripts/.
Keep cross-tooling/local CI scripts under scripts/ci/ when they are used outside Actions.

Workflow behavior documentation in this directory:

.github/workflows/main-branch-flow.md

Current workflow helper scripts:

.github/workflows/scripts/ci_workflow_owner_approval.js
.github/workflows/scripts/lint_feedback.js
.github/workflows/scripts/pr_auto_response_contributor_tier.js
.github/workflows/scripts/pr_auto_response_labeled_routes.js
.github/workflows/scripts/pr_check_status_nudge.js
.github/workflows/scripts/pr_intake_checks.js
.github/workflows/scripts/pr_labeler.js
.github/workflows/scripts/test_benchmarks_pr_comment.js