ethernet 957ea640de fix(ci): publish inline E2E evidence (#69699) ... * fix(ci): publish inline E2E evidence Upload bounded screenshot evidence from E2E, then publish validated images from a trusted workflow_run job to commit-pinned branches in the evidence repo. Wait briefly for the live CI review comment marker before publishing, so GitHub's read-after-write delay cannot leave an orphaned evidence branch. * fix(ci): isolate privileged credentials from PR jobs Keep App private keys and Docker Hub credentials out of PR-controlled workflows. Use protected environments for trusted publishing and a public repository variable for the App client ID. * fix(ci): attach E2E evidence with restricted bot session Replace the App-backed evidence repository publisher with gh-image uploads from a dedicated bot session in the gh-image environment. * fix(ci): publish validated E2E evidence from forks Let the trusted default-branch publisher handle bounded, validated evidence artifacts from fork PR CI without checking out or executing fork code.		2026-07-23 02:15:23 +00:00
..
detect-changes	ci: surface E2E screenshots in review comment (#69631)	2026-07-22 23:19:53 +00:00
get-app-token	fix(ci): publish inline E2E evidence (#69699)	2026-07-23 02:15:23 +00:00
nix-setup	fix(nix): replace magic-nix-cache with Cachix (#17928)	2026-04-30 17:38:58 +05:30
retry	fix(ci): make tests, workflows, and attribution reliable under load (#66373)	2026-07-17 20:55:24 +00:00