ci: publish preview builds from fork PRs via GitHub OIDC - #2387

Merged

fengmk2 merged 9 commits into

mainfrom

feat/oidc-preview-publish

Aug 10, 2026

Commits on Aug 10, 2026

ci: publish preview builds from fork PRs via GitHub OIDC
fengmk2
committed
4516cb8
ci: repoint bridge action pin to the re-signed commit
fengmk2
committed
d1a9789
ci: pin the bridge action to the merged main commit
fengmk2
committed
55bd66b
ci: document why the workflow_run trigger is suppressed for zizmor
fengmk2
committed
756afda
ci: gate the preview publish job behind a required-reviewer environment
fengmk2
committed
20b8acd
ci: rename the preview publish environment to preview-build-release
fengmk2
committed
891e581
ci: cleanup pass on the preview publish workflows
fengmk2
committed
6c7db59
ci: refuse ambiguous PR resolution, keep the artifact past approval
fengmk2
committed
da9911d
ci: re-check authorization after approval, require the artifact
fengmk2
committed
897791d