ci: centralize branch verification and source scanning #23

Merged
KofTwentyTwo merged 1 commits from feature/remaining-shared-codeql-develop into develop 2026-10-21 17:17:57 +00:00
KofTwentyTwo commented 2026-10-21 17:11:01 +00:00 (Migrated from github.com)

Use verified qqq-orb 0.7.15 and the immutable shared source scanner owned by qqq-orb. Main and develop callers are migrated as a pair before retiring default setup. Preserve the branch's application/policy profile, all application/smoke tests, and require exact-head hosted verification plus shared scanning before merge. Canonical caller validation, actionlint and diff checks passed.

Use verified qqq-orb 0.7.15 and the immutable shared source scanner owned by qqq-orb. Main and develop callers are migrated as a pair before retiring default setup. Preserve the branch's application/policy profile, all application/smoke tests, and require exact-head hosted verification plus shared scanning before merge. Canonical caller validation, actionlint and diff checks passed.
Sign in to join this conversation.