Harden CI workflows - #1624

Merged

tamalsaha merged 24 commits into

May 15, 2026

Commits on May 11, 2026

Use dynamic github token
tamalsaha
committed
13e2c48
Harden GitHub Actions workflows
tamalsaha
committed
2e1006b

Commits on May 12, 2026

Restrict /ok-to-test to org members
tamalsaha
committed
bcf082c
Push to ghcr.io/appscodeci with docker/login-action
tamalsaha
committed
ba0f908

Commits on May 13, 2026

Add job permissions for workflow
tamalsaha
committed
c4262a0
Use GitHub App token for release tracker comments
tamalsaha
committed
9be22af
Apply kubedb/installer#2281: harden CI workflows
tamalsaha
committed
f51ef2a
Remove Prepare git step from release-tracker.yml
tamalsaha
committed
876fba4
Rename LGTM App token step id to lgtm-app-token
tamalsaha
committed
b70afcd
release-tracker.yml: gate at job level with merged == true
tamalsaha
committed
b1ec07f
release-tracker.yml: drop permissions block
tamalsaha
committed
c162c6f
release-tracker.yml: grant permission-pull-requests to LGTM App
tamalsaha
committed
e3f43f5
update-docs.yml: use LGTM App token
tamalsaha
committed
318e410
Replace hub CLI with gh CLI
tamalsaha
committed
a41cbc0

Commits on May 14, 2026

Normalize Prepare git user, fetch-depth, drop permission-issues
tamalsaha
committed
74b5002
Use docker/login-action; drop redundant docker hub steps
tamalsaha
committed
404c615
Add 1gtm-app[bot] to kodiak auto_approve_usernames
tamalsaha
committed
ee5470c
Normalize kodiak auto_approve_usernames
tamalsaha
committed
8139fe5
Pin docker/login-action to v4.1.0
tamalsaha
committed
cff2473
Bump softprops/action-gh-release to v2.6.2; add permissions
tamalsaha
committed
50b967f
Makefile: use --tags in git describe so lightweight tags resolve
tamalsaha
committed
058edf9
Remove bzr install from workflows
tamalsaha
committed
e56d9a9
Pin git user to 1gtm in update-crds/update-docs workflows
tamalsaha
committed
a4db194

Commits on May 15, 2026

Harden e2e workflow and simplify CI
tamalsaha
committed
2597336