Skip to content

Add read-only, commit-pinned test CI - #1

Merged
coela-oss merged 2 commits into
mainfrom
codex/security-ci-20261001
Oct 1, 2026
Merged

coela-oss merged 2 commits into
mainfrom
codex/security-ci-20261001

Conversation

@coela-oss

Copy link
Copy Markdown
Contributor

Tests currently require local invocation and are not run automatically for pull requests. Add CI for pull requests, main pushes and manual runs. Official Actions are pinned to full commit SHAs, contents permission is read-only, and checkout does not persist credentials.

Validation: reviewed workflow against package manifest and existing test layout; local execution is unavailable. Keep this PR in draft until GitHub CI passes. This workflow runs regression tests, not a complete secret/history or dependency-vulnerability audit. No production credentials or provider integration are configured.

@coela-oss
coela-oss marked this pull request as ready for review October 1, 2026 09:53
@coela-oss
coela-oss merged commit d8cc3f2 into main Oct 1, 2026
2 checks passed
@coela-oss
coela-oss deleted the codex/security-ci-20261001 branch October 1, 2026 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant