paperclip/.github/workflows
Dotta 2116570603 Isolate trusted runner reporting dependencies behind an integrity lock
Install only the dedicated reporting runtime with npm ci and disabled lifecycle scripts. Preserve the trusted source checkout, pin all registry artifacts, and execute reporting and publication through the isolated runtime before and after scoped credential exchange.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-12 22:38:31 -05:00
..
agent-runtime-images.yml build(deps): bump actions/checkout from 6 to 7 (#8461) 2026-06-23 10:13:39 -07:00
cloud-artifacts.yml ci: use reserved AWS capacity for post-merge cloud verification (#13257) 2026-09-11 14:13:01 -07:00
cloud-readiness.yml ci: keep Cloud readiness markers out of the builder queue (#13330) 2026-09-12 12:32:46 -07:00
commitperclip-review.yml fix(build): enforce Node 24 across Paperclip (#11792) 2026-08-21 10:17:52 -07:00
docker-cloud.yml Merge pinned master into work folders base and reconcile migration 0277 2026-09-12 18:26:16 -05:00
docker-runner-check.yml fix(ci): reuse one available Cloud registry cache (#13334) 2026-09-12 13:20:18 -07:00
docker.yml fix(ci): validate shared Cloud image contexts throughout the stack 2026-09-11 17:01:54 -05:00
e2e.yml test(runner): add full-stack acceptance and eval gates (#12700) 2026-09-02 08:55:08 -05:00
pr-trusted.yml ci: reuse dependency caches without per-PR uploads (#13300) 2026-09-11 17:31:15 -07:00
pr.yml ci: activate shared PR dependency cache restores (#13302) 2026-09-11 18:05:36 -07:00
refresh-lockfile.yml fix(ci): avoid empty pnpm caches from lockfile refresh (#13267) 2026-09-11 14:35:28 -07:00
release-smoke.yml Follow the current onboarding arc in the release smoke (#12423) 2026-08-28 07:21:08 -07:00
release-verify.yml ci: run release Runner protocol and Rust checks in parallel (#13326) 2026-09-12 11:33:20 -07:00
release.yml ci: use reserved AWS capacity for post-merge cloud verification (#13257) 2026-09-11 14:13:01 -07:00
runner-chaos-evals.yml ci: allow dependency changes in cloud eval verification (#13286) 2026-09-11 15:56:21 -07:00
runner-full-stack-e2e.yml Isolate trusted runner reporting dependencies behind an integrity lock 2026-09-12 22:38:31 -05:00
runner-live-evals.yml feat(runner): restore direct live eval campaigns and reports (#12909) 2026-09-05 20:18:11 -05:00
runner-protocol-live-evals.yml fix(evals): make the chat viewer the default published Evalbook (#12952) 2026-09-07 07:47:17 -05:00
storybook-deploy.yml feat: publish CODEOWNER-approved Storybook branch previews (#13226) 2026-09-11 09:13:55 -05:00
storybook-visual.yml feat: publish CODEOWNER-approved Storybook branch previews (#13226) 2026-09-11 09:13:55 -05:00