Skip to content

chore(governance): pin integrated engine across governance workflows - #109

Merged
vitormattos merged 1 commit into
mainfrom
fix/pin-integrated-governance-engine-20261104
Nov 4, 2026
Merged

vitormattos merged 1 commit into
mainfrom
fix/pin-integrated-governance-engine-20261104

Conversation

@vitormattos

Copy link
Copy Markdown
Member

Purpose

Follow up on merged github-governance#41, #43, and .github#106.

Change

  • Pin both the reviewed GitHub governance plan/apply workflow and the opt-in automatic onboarding workflow to the same immutable, integrated governance engine SHA 1f0e4a80cf44cd6762eb3d0144200fd51fc2b07d.
  • Preserve split read/admin credentials, explicit privileged approval and safe onboard-only=true semantics.
  • Add a regression test ensuring the two workflows cannot silently drift to different engine versions.

Verification

  • 105 Python tests passed locally.
  • Workflow policy checks and git diff --check passed.
  • New commit cryptographically verified and DCO signed.
  • CI is required before merge.

This PR does not apply any ruleset or enable the automatic onboarding credentials.

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos
vitormattos merged commit 41ffa55 into main Nov 4, 2026
5 checks passed
@vitormattos
vitormattos deleted the fix/pin-integrated-governance-engine-20261104 branch November 4, 2026 18:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant