ECC/.github/workflows
Mal-Qu e53b4d9e39
Finalize and enhance SLSA generic generator workflow (#2197)
* Add SLSA generic generator workflow

* ci: finalize SLSA generator and fix bun test timeout

- Harden SLSA workflow with persist-credentials: false and pinned actions
- Update SLSA workflow to build real npm artifacts and fix digest outputs
- Increase trae-install test timeout to prevent ETIMEDOUT under Bun
- Fix Validate Components security violation in SLSA workflow

* ci: finalize SLSA generator and fix bun test timeout

- Harden SLSA workflow with persist-credentials: false and pinned actions
- Update SLSA workflow to build real npm artifacts and fix digest outputs
- Rename workflow to "SLSA generic generator workflow #1"
- Increase trae-install test timeout to prevent ETIMEDOUT under Bun
- Fix Validate Components security violation in SLSA workflow

* Update generator-generic-ossf-slsa3-publish.yml

Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>

* generator-generic-ossf-slsa3-publish.yml

* .github/workflows/generator-generic-ossf-slsa3-publish.yml

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

* Update .github/workflows/generator-generic-ossf-slsa3-publish.yml

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

---------

Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-06-15 14:01:29 -04:00
..
ci.yml chore(deps): bump actions/setup-node (#2204) 2026-06-10 23:39:00 -04:00
generator-generic-ossf-slsa3-publish.yml Finalize and enhance SLSA generic generator workflow (#2197) 2026-06-15 14:01:29 -04:00
maintenance.yml chore(deps): bump actions/setup-node (#2204) 2026-06-10 23:39:00 -04:00
monthly-metrics.yml build(deps): bump actions/github-script from 8.0.0 to 9.0.0 2026-04-12 04:52:39 +00:00
release-announce.yml ci: harden release announce checkout 2026-06-09 21:03:22 -04:00
release.yml chore(deps): bump actions/setup-node (#2204) 2026-06-10 23:39:00 -04:00
reusable-release.yml chore(deps): bump actions/setup-node (#2204) 2026-06-10 23:39:00 -04:00
reusable-test.yml fix(security): add host/origin allowlist + validate git refs + quote workflow input (#2185) 2026-06-15 13:49:40 -04:00
reusable-validate.yml chore(deps): bump actions/setup-node (#2204) 2026-06-10 23:39:00 -04:00
supply-chain-watch.yml chore(deps): bump actions/setup-node (#2204) 2026-06-10 23:39:00 -04:00