Add only one centrally updated protected-channel workflow. Develop pushes retain the existing original unit/Maven/core/full/image graph; manual dispatch retains both currently absent enable/license flags, exact signed existing tag, successful same-source core/full smoke, upstream/public input gates and the original two Compose release assets. No application, dependency, version, tag, release, flag, permission or credential change. The original known two application assertion failures remain red and block image publication. Validation: existing original graph/source baseline, 518 Linux publisher tests, 22 Linux producer/finalizer controls, 15 native controls. Shared source212/channel44 and separately reviewed trusted publisher policy must land before canonical merge; inherited canonical suppression follows exact caller adoption, preserving PR/nonpublishing checks.
Add only one centrally updated protected-channel workflow. Develop pushes retain the existing original unit/Maven/core/full/image graph; manual dispatch retains both currently absent enable/license flags, exact signed existing tag, successful same-source core/full smoke, upstream/public input gates and the original two Compose release assets. No application, dependency, version, tag, release, flag, permission or credential change. The original known two application assertion failures remain red and block image publication. Validation: existing original graph/source baseline, 518 Linux publisher tests, 22 Linux producer/finalizer controls, 15 native controls. Shared source212/channel44 and separately reviewed trusted publisher policy must land before canonical merge; inherited canonical suppression follows exact caller adoption, preserving PR/nonpublishing checks.
QRun-IO/ci-policy: Shared QQQ all CI (original verify-and-smoke and develop image capture) / Develop Container (build and retain the OCI image for the trusted publisher) (pull_request) Skipped
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Add only one centrally updated protected-channel workflow. Develop pushes retain the existing original unit/Maven/core/full/image graph; manual dispatch retains both currently absent enable/license flags, exact signed existing tag, successful same-source core/full smoke, upstream/public input gates and the original two Compose release assets. No application, dependency, version, tag, release, flag, permission or credential change. The original known two application assertion failures remain red and block image publication. Validation: existing original graph/source baseline, 518 Linux publisher tests, 22 Linux producer/finalizer controls, 15 native controls. Shared source212/channel44 and separately reviewed trusted publisher policy must land before canonical merge; inherited canonical suppression follows exact caller adoption, preserving PR/nonpublishing checks.