SnapOtter

External/SnapOtter

Fork 0

mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00

Commit Graph

Author	SHA1	Message	Date
SnapOtterandGitHub	2e91368816	ci(release): authenticate main pushes with an admin RELEASE_TOKEN (#486 ) Point semantic-release's version-bump push and the docs-changelog push at a RELEASE_TOKEN admin PAT so they clear the 16 required checks (default token is rejected). Falls back to the default token, so no change until the secret is set. Documents creating/rotating the token in RELEASE.md.	2026-07-11 12:49:02 +08:00
SnapOtterandGitHub	b369b4fb41	ci(release): gate image publish behind a manual approval (#482 ) Attach the manifest job to a publish-images GitHub Environment so Docker Hub + GHCR tags only go live after a maintainer approves the release run. Build + Trivy scan still run automatically; approval is the last step. Adds RELEASE.md runbook.	2026-07-11 11:09:53 +08:00

Author

SHA1

Message

Date

SnapOtterandGitHub

2e91368816

ci(release): authenticate main pushes with an admin RELEASE_TOKEN (#486 )

Point semantic-release's version-bump push and the docs-changelog push at a RELEASE_TOKEN admin PAT so they clear the 16 required checks (default token is rejected). Falls back to the default token, so no change until the secret is set. Documents creating/rotating the token in RELEASE.md.

2026-07-11 12:49:02 +08:00

SnapOtterandGitHub

b369b4fb41

ci(release): gate image publish behind a manual approval (#482 )

Attach the manifest job to a publish-images GitHub Environment so Docker Hub + GHCR tags only go live after a maintainer approves the release run. Build + Trivy scan still run automatically; approval is the last step. Adds RELEASE.md runbook.

2026-07-11 11:09:53 +08:00