pulse

mirror of https://github.com/rcourtman/Pulse.git synced 2026-09-10 10:35:51 +00:00

Files

T

Richard Courtman 79d87a4a2c Qualify release candidates against the branch that owns their version

The secure-runtime qualification required the candidate commit to be an
ancestor of origin/main. Under the release train a patch candidate is cut
from release/vX.Y and is not on main at all, so v6.4.3-rc.1's
qualification failed at "Verify detached release source" before running
any check, and the steward correctly refused to treat the candidate as
stable-capable. Resolve the branch the control plane maps the version to,
fetch that, check ancestry against it, and hand the same ref to the
attestation so the receipt records the line it was verified against.

Refs #1753

Contract-Neutral: release qualification checks ancestry against the mapped release branch; no product or contract change

2026-09-02 17:52:33 +01:00

codeql/extensions/pulse-security-models

Harden remaining CodeQL security boundaries

2026-07-09 19:46:40 +01:00

ISSUE_TEMPLATE

Preserve secondary issue feedback

2026-08-29 12:24:03 +01:00

scripts

Reclaim CI capacity when pull requests close

2026-09-02 11:03:53 +01:00

workflows

Qualify release candidates against the branch that owns their version