ECC/.github
Mal-Qu e53b4d9e39
Finalize and enhance SLSA generic generator workflow (#2197)
* Add SLSA generic generator workflow

* ci: finalize SLSA generator and fix bun test timeout

- Harden SLSA workflow with persist-credentials: false and pinned actions
- Update SLSA workflow to build real npm artifacts and fix digest outputs
- Increase trae-install test timeout to prevent ETIMEDOUT under Bun
- Fix Validate Components security violation in SLSA workflow

* ci: finalize SLSA generator and fix bun test timeout

- Harden SLSA workflow with persist-credentials: false and pinned actions
- Update SLSA workflow to build real npm artifacts and fix digest outputs
- Rename workflow to "SLSA generic generator workflow #1"
- Increase trae-install test timeout to prevent ETIMEDOUT under Bun
- Fix Validate Components security violation in SLSA workflow

* Update generator-generic-ossf-slsa3-publish.yml

Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>

* generator-generic-ossf-slsa3-publish.yml

* .github/workflows/generator-generic-ossf-slsa3-publish.yml

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

* Update .github/workflows/generator-generic-ossf-slsa3-publish.yml

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

---------

Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-06-15 14:01:29 -04:00
..
ISSUE_TEMPLATE chore(config): governance and config foundation (#292) 2026-03-16 13:39:03 -07:00
prompts ci: harden workflows and sponsor code review config 2026-06-09 21:20:17 -04:00
workflows Finalize and enhance SLSA generic generator workflow (#2197) 2026-06-15 14:01:29 -04:00
CODEOWNERS feat: extend harness audit integration scoring (#1990) 2026-05-19 06:20:54 -04:00
copilot-instructions.md ci: harden workflows and sponsor code review config 2026-06-09 21:20:17 -04:00
dependabot.yml security: harden advisory intake and dependency coverage 2026-06-09 20:46:14 -04:00
FUNDING.yml chore: clean up FUNDING.yml format 2026-02-28 10:09:51 -08:00
PULL_REQUEST_TEMPLATE.md chore(config): governance and config foundation (#292) 2026-03-16 13:39:03 -07:00
release.yml feat: deliver v1.8.0 harness reliability and parity updates 2026-03-04 14:48:06 -08:00