v1.1.6

v1.1.6

Bug Fixes

• pin policy library workflow release dependencies (#210) (c573def)

v1.1.5

v1.1.5

Bug Fixes

• ci: harden workflow token permissions and avoid shell interpolation of step outputs (#208) (d71f29e)

v1.1.4

v1.1.4

Bug Fixes

• centralize policy library release publication (#206) (752a343)

v1.1.3

v1.1.3

Bug Fixes

• deps: update github actions (#196) (6a5321b)

v1.1.2

v1.1.2

Bug Fixes

• source-review: harden %d violation messages against non-numeric input (#201) (22993c0)

v1.1.1

v1.1.1

Bug Fixes

• ci: serialize build-image after build-blob-offline in release-cut (#199) (4d8a8d6)

v1.1.0

v1.1.0

Features

• source-review: gate zero-approval merges on merger allowlist (#198) (52a1540)

v1.0.5

v1.0.5

Bug Fixes

• metadata: deny attestations missing a subject name (#194) (15409c2)

v1.0.4

v1.0.4

Bug Fixes

• handle array input in vsa_verification_result policy (#193) (a0e4466)

v1.0.3

v1.0.3

Bug Fixes

• deps: update github actions (#184) (24d51ac)