wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

docs(security): add workflow secret intake preflight

Browse Source
This commit is contained in:
Your Name
2026-05-19 09:06:11 +08:00
parent 9d987570b6
commit b96c590c8c
34 changed files with 229 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
scripts/security/security-mirror-progress-guard.py
View File

@@ -99,6 +99,7 @@ def validate(root: Path) -> None:
"s4_12_workflow_secret_name_owner_response_audit_event_templates",
"s4_12_workflow_secret_name_owner_response_redaction_examples",
"s4_12_workflow_secret_name_owner_response_collection_checks",
"s4_12_workflow_secret_name_owner_response_intake_preflight_checks",
]
assert_equal(
"progress_delta_ledger.delta_ids",

8
scripts/security/source-control-owner-response-guard.py
View File

@@ -256,6 +256,14 @@ LANES = [
"collection-workflow-secret-no-approval-language",
"collection-workflow-secret-audit-metadata-only",
],
"expected_preflight_checks": [
"preflight-known-workflow-secret-lane",
"preflight-required-workflow-secret-owner-fields",
"preflight-allowed-workflow-secret-decision",
"preflight-workflow-secret-redacted-evidence-only",
"preflight-no-workflow-secret-execution-request",
"preflight-all-five-workflow-secret-lanes-before-accepted",
],
},
]