Repository navigation
Remove unused signing authorization modes - #10
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Require the single supported trusted-workflow policy format. Version 3 policies contain a caller path allowlist and mandatory builder/finalizer identities; remove authorization mode switches and empty workflow/helper content-pin fields.
Advance production policy to revision 3 and disposable-test policy to revision 10, recording native signer source fe6a2962b22e33deecb85cd0a738c1d6690fb7c1. Signing keys and rotation constraints are unchanged. Both public policies were exported by the native admin tool after validating the existing key/certificate/lineage configuration.
Validation: 46 shared-helper tests, 8 consumer/installer tests, 18 native tests, and workflow linting pass. This accompanies connectbot/actions#27 (squashed to one commit), runtime cleanup connectbot/actions#30, and connectbot/connectbot#2527. The VM and shared helpers will be updated together after policy approval; production publication stays disabled pending live verification.