Harden CI workflows - #45

Merged

tamalsaha merged 17 commits into

May 15, 2026

Commits on May 11, 2026

Use dynamic github token
tamalsaha
committed
e7c2813
Harden GitHub Actions workflows
tamalsaha
committed
38aa333

Commits on May 12, 2026

Authenticate to ghcr.io/appscode with GitHub App token
tamalsaha
committed
3c3ddc1

Commits on May 13, 2026

Add job permissions for workflow
tamalsaha
committed
134be1b
Use GitHub App token for release tracker comments
tamalsaha
committed
cc5420d
Apply kubedb/installer#2281: harden CI workflows
tamalsaha
committed
ff6a9ee
Remove Prepare git step from release-tracker.yml
tamalsaha
committed
b82fb74
Rename LGTM App token step id to lgtm-app-token
tamalsaha
committed
e333e16
release-tracker.yml: gate at job level with merged == true
tamalsaha
committed
024e13f
release-tracker.yml: drop permissions block
tamalsaha
committed
302d1bc
release-tracker.yml: grant permission-pull-requests to LGTM App
tamalsaha
committed
92859db
Use node-version: '22' in setup-node steps
tamalsaha
committed
7b01e72

Commits on May 14, 2026

Normalize Prepare git user, fetch-depth, drop permission-issues
tamalsaha
committed
187b921
Add 1gtm-app[bot] to kodiak auto_approve_usernames
tamalsaha
committed
c9f6d19
Normalize kodiak auto_approve_usernames
tamalsaha
committed
975439c
Bump softprops/action-gh-release to v2.6.2; add permissions
tamalsaha
committed
605d636
Makefile: use --tags in git describe so lightweight tags resolve
tamalsaha
committed
632d527