Harden CI workflows - #135

Merged

tamalsaha merged 18 commits into

May 15, 2026

Commits on May 11, 2026

Use dynamic github token
tamalsaha
committed
daf3222
Harden GitHub Actions workflows
tamalsaha
committed
d354f92

Commits on May 13, 2026

Add job permissions for workflow
tamalsaha
committed
a938353
Use GitHub App token for release tracker comments
tamalsaha
committed
a59f802
Apply kubedb/installer#2281: harden CI workflows
tamalsaha
committed
85ae302
Remove Prepare git step from release-tracker.yml
tamalsaha
committed
e90fab3
Rename LGTM App token step id to lgtm-app-token
tamalsaha
committed
44bfb7a
release-tracker.yml: gate at job level with merged == true
tamalsaha
committed
ad8377a
update-crds.yml: use LGTM App token
tamalsaha
committed
e0bbf45
release-tracker.yml: drop permissions block
tamalsaha
committed
344bce8
release-tracker.yml: grant permission-pull-requests to LGTM App
tamalsaha
committed
7758949

Commits on May 14, 2026

Normalize Prepare git user, fetch-depth, drop permission-issues
tamalsaha
committed
300a0e5
Add 1gtm-app[bot] to kodiak auto_approve_usernames
tamalsaha
committed
6df6d8a
Normalize kodiak auto_approve_usernames
tamalsaha
committed
31d2316
Bump softprops/action-gh-release to v2.6.2; add permissions
tamalsaha
committed
1d350c3
Makefile: use --tags in git describe so lightweight tags resolve
tamalsaha
committed
b64470a
Remove bzr install from workflows
tamalsaha
committed
a5b034c
Pin git user to 1gtm in update-crds/update-docs workflows
tamalsaha
committed
e759962