Skip to content

GL_ManageReleases.md

Latest commit

 

History

History
20 lines (13 loc) · 1.02 KB

GL_ManageReleases.md

File metadata and controls

20 lines (13 loc) · 1.02 KB

GL_ManageReleases

Edge Schema

General Information

The non-traversable GL_ManageReleases edge indicates that a role can create and manage releases in this project — including creating release tags, attaching release notes, and linking release artifacts. Maintainer role and above typically have this permission.

Although non-traversable, this edge is significant because creating a release may trigger release-triggered pipelines that have access to production secrets and deploy credentials. Additionally, a release can expose build artifacts that contain sensitive files, and creating unauthorized releases can impact software supply chain integrity by publishing tampered artifacts under legitimate version tags.

graph LR
    maintRole("fa:fa-user-tie GL_ProjectRole myproject/Maintainer")
    project("fa:fa-diagram-project GL_Project myorg/backend")

    maintRole -.->|GL_ManageReleases| project
Loading