Skip to content

Remove credentialed deployment dispatch - #15

Open
arseniycodes wants to merge 2 commits into
mainfrom
ash/protect-deployment-workflow
Open

Remove credentialed deployment dispatch#15
arseniycodes wants to merge 2 commits into
mainfrom
ash/protect-deployment-workflow

Conversation

@arseniycodes

@arseniycodes arseniycodes commented Aug 14, 2026

Copy link
Copy Markdown
Contributor

Summary

  • remove the public workflow that held and used a private-repository dispatch credential
  • require both maintainers as code owners for workflow and ownership-rule changes

Merge order

Merge superloglabs/responder#104 first so receiver-side polling is active before this cleanup reaches public main.

The obsolete repository secret and target variables have already been removed. Public main also requires an independent approval, dismisses stale approvals, forbids approval by the last pusher, applies protection to admins, has no review bypass, and requires full-SHA Action references.

Validation

  • actionlint .github/workflows/*.yml
  • git diff --check
  • confirmed both code owners have repository admin permission

Summary by cubic

Removes the credentialed cross-repo deployment dispatch and adds CODEOWNERS to enforce maintainer review of workflow and ownership changes. Previously, pushes to main dispatched a private-repo workflow with a token; now no cross-repo dispatch occurs and deployments rely on receiver-side polling.

  • Merge superloglabs/responder#104 first so receiver-side polling is active before this reaches public main.
  • Changes to /.github/workflows/ and /.github/CODEOWNERS now require approval from both @arseniycodes and @nicolomagnante-cmd.

Written for commit bf0e7ed. Summary will update on new commits.

Review in cubic

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Re-trigger cubic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant