Oliver Kieselbach 60a41e9778 CI: signing jobs run in the release environment ...

The code-signing identity trusts only environment:release now, so build-agent
release, build-msi sign-loader and release, and publish-scripts publish run in it.
Every job that federates to Azure carries an environment; the ref is no longer a
trusted subject. Help texts of the storage and endpoint helpers follow: the local
build publishes nothing since D-354.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-20 18:30:02 +02:00

..

assets

docs(readme): refresh screenshots, add social preview source

2026-09-03 14:50:19 +02:00

codeql

ci(codeql): exclude js/missing-rate-limiting; a test pins every OAuth route to its limiter (D-281)

2026-09-24 18:58:08 +02:00

ISSUE_TEMPLATE

docs(repo): AGPL-3.0 root license, MCP section in README, security policy and issue forms

2026-09-03 14:29:14 +02:00

scripts

CI: signing jobs run in the release environment

2026-10-20 18:30:02 +02:00

workflows

CI: signing jobs run in the release environment

2026-10-20 18:30:02 +02:00

dependabot.yml

CI: duplicate-code check over src/ with a baseline that only shrinks

2026-10-10 18:10:07 +02:00

FUNDING.yml

Update Buy Me a Coffee username in FUNDING.yml

2026-02-24 11:55:17 +01:00