refactor: harden build provenance and releases - #59

Open

bashrusakh wants to merge 20 commits into

mainfrom

refactor/deskforge-corrective-pr

Commits on Aug 12, 2026

refactor: harden build provenance and releases
bashrusakh
committed
2419d5e

Commits on Aug 13, 2026

fix(workflow): harden ruleset and build cleanup checks
bashrusakh
committed
9b6cd40
fix(custom-build): close zip traversal path
bashrusakh
committed
f01b2d7

Commits on Aug 14, 2026

fix(workflow): provide sqlx schema for rust ci
bashrusakh
committed
ebcdc22
fix(custom-build): make zip path validation codeql-visible
bashrusakh
committed
66bdd00
workflow: harden GitHub protection contract
bashrusakh
committed
642f36a
docs: record corrective PR publication evidence
bashrusakh
committed
3067576
workflow: harden ruleset failure handling
bashrusakh
committed
68e7f30
docs: record ruleset review evidence
bashrusakh
committed
4aea8a6
workflow: align ruleset validation with repository responses
bashrusakh
committed
1900160
ui: clarify custom endpoint ports
bashrusakh
committed
cd11aa3
test: cover legacy tag list contract
bashrusakh
committed
9cad830
api: remove obsolete tag protection fallback
bashrusakh
committed
64e3202

Commits on Aug 15, 2026

Commits on Aug 16, 2026

docs: finalize workflow migration records
bashrusakh
committed
1bc2179
docs: close workflow migration checklist
bashrusakh
committed
b772153