KofTwentyTwo/windows-app-template
2
0 Fork 0
Code Issues 1 Pull Requests 4 Actions Packages Projects Releases Wiki Activity

WIP: fix(template): complete onboarding and pinned scanner policy #1

Draft
KofTwentyTwo wants to merge 2 commits from fix/template-onboarding into main
pull from: fix/template-onboarding
merge into: KofTwentyTwo:main
Conversation 0 Commits 2 Files Changed 6
+50 -11
2 Commits
Author SHA1 Message Date
james.maesandCodex 758e773772 fix(template): allow pinned security scanner containers 
Hosted bootstrap showed that GitHub rejects the security builder container actions under the selected-actions policy. Permit only its exact published Gitleaks and Trivy image digests; preserve selected actions and required security gates.

Validation: 55 script cases, full analysis of changed module/tests, guide lint and normal hooks.

Refs: KofTwentyTwo/AppKit#10, KofTwentyTwo/AppKit#20

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
 2026-10-10 19:02:05 -05:00
james.maesandCodex fac10a78dc docs(template): clarify first restore and required checks 
Document local package trials and creation of NuGet locks after generation. Refer onboarding to the canonical check table and correct standalone installed-update and tooling context names.

Refs: KofTwentyTwo/AppKit#10, KofTwentyTwo/AppKit#20

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
 2026-10-10 18:50:54 -05:00