xj d4c24f6a83 fix(ci): address coderabbit review findings ... - Split GH_TOKEN away from binary smoke-test step to prevent token exfiltration via compromised release artifact - Wrap gh subprocess calls in try/except FileNotFoundError so the guard degrades gracefully when gh CLI is not installed - Remove stderr suppression from cargo check --locked so diagnostics are visible on failure		2026-03-02 20:40:13 -08:00
..
codeql	Standardize security workflow and enhance CodeQL analysis (#479)	2026-02-17 00:10:46 -05:00
connectivity	feat(ci): complete security audit governance and resilient CI control lanes	2026-02-24 16:25:53 +08:00
ISSUE_TEMPLATE	docs(security): standardize private vuln workflow and SLA templates	2026-02-25 21:32:32 +08:00
release	ci: remove dev-to-main promotion gate and align main flow	2026-02-28 14:06:08 +08:00
security	ci(security): add governance metadata for RUSTSEC-2024-0436	2026-02-28 21:30:37 +08:00
workflows	fix(ci): address coderabbit review findings	2026-03-02 20:40:13 -08:00
actionlint.yaml	ci: prioritize release codeql with dedicated hetzner lane	2026-03-03 00:14:49 +08:00
CODEOWNERS	ci: require explicit @chumyin approval for CI/CD changes	2026-02-27 22:11:27 +00:00
dependabot.yml	ci: remove dev-to-main promotion gate and align main flow	2026-02-28 14:06:08 +08:00
label-policy.json	ci(workflows): consolidate policy and rust workflow setup (#564)	2026-02-17 11:35:20 -05:00
labeler.yml	docs: strengthen collaboration governance and AGENTS engineering protocol (#263)	2026-02-16 05:59:04 -05:00
pull_request_template.md	ci: remove dev-to-main promotion gate and align main flow	2026-02-28 14:06:08 +08:00