Skip to content

ci: add Verify Release workflow to gate release artifacts#124

Merged
ashishkurmi merged 2 commits into
step-security:mainfrom
ashishkurmi:verify-release-workflow
May 29, 2026
Merged

ci: add Verify Release workflow to gate release artifacts#124
ashishkurmi merged 2 commits into
step-security:mainfrom
ashishkurmi:verify-release-workflow

Merge branch 'main' into verify-release-workflow

a0af587
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Harden-Runner succeeded May 29, 2026 in 2m 6s

No anomalous activity on CI/CD runners

No new Harden-Runner detections for this pull request.

Details

Harden-Runner monitors all outbound traffic from each job at the DNS and network layers to ensure that CI/CD runners do not communicate with unauthorized destinations.
This reduces the risk of CI/CD secrets and source code being exfiltrated.

📋 Monitored GitHub Actions workflow runs

The following GitHub Actions workflow runs were monitored as part of this pull request.

Workflow Run ID Unique Destinations Actions Used Detailed Insights
tests.yml 26650700245 14 4 View Insights
gosec.yml 26650699413 3 5 View Insights

📚 Learn More

You can learn more about this GitHub check here