Chinesezjc 1665223358 feat(ci): publish the approval decision label from a dedicated approval App ...

Mint the check-run token from a dedicated approval App instead of a shared
automation App, so the identity that owns the decision check suite is specific to
this gate. The workflow reads `vars.DSH_APPROVAL_APP_CLIENT_ID` and
`secrets.DSH_APPROVAL_APP_PRIVATE_KEY`, and the token stays scoped to
`checks: write`.

2026-10-21 17:50:27 +08:00

..

build-exe-for-python-sdk.yml

build: rename build:src and build:test to build:artifacts and build:check

2026-10-11 22:16:47 +08:00

build-exe-for-ssh-helper.yml

feat(ssh): package standalone POSIX helper runtimes

2026-09-23 19:16:59 +08:00

build-preview-cloudflare.yml

build: rename build:src and build:test to build:artifacts and build:check

2026-10-11 22:16:47 +08:00

ci-master.yml

Merge remote-tracking branch 'origin/master' into worktree/ssh-helper-binaries

2026-10-08 15:06:19 +08:00

ci.yml

Merge pull request #6340 from deepseek-harness/fix/windows-runner-windowless

2026-10-19 11:23:33 +08:00

desktop-publish.yml

fix(desktop): preflight local publication config before install

2026-10-16 12:42:29 +08:00

docs-pages.yml

fix(ci): use the compatible pnpm setup action on Intel macOS

2026-10-07 23:17:10 +08:00

e2e.yml

build: rename build:src and build:test to build:artifacts and build:check

2026-10-11 22:16:47 +08:00

expected-filenames.yml

chore(deps): update GitHub Actions to mature release tags

2026-10-07 22:28:27 +08:00

issue-lifecycle.yml

fix(ci): avoid unnecessary issue policy Project reads and lifecycle runs

2026-09-11 22:42:46 +08:00

issue-policy.yml

fix(ci): preserve trusted legacy policy during preflight rollout

2026-09-11 22:42:46 +08:00

macos-package.yml

fix(desktop): reject debug publications early and harden runner supervision

2026-10-15 17:40:38 +08:00

node-addon-system-release.yml

fix(ci): use the compatible pnpm setup action on Intel macOS

2026-10-07 23:17:10 +08:00

node-addon-system.yml

fix(ci): use the compatible pnpm setup action on Intel macOS

2026-10-07 23:17:10 +08:00

pi-ai-provider-e2e.yml

fix(ci): use the compatible pnpm setup action on Intel macOS

2026-10-07 23:17:10 +08:00

publish-ssh-helper.yml

fix(ssh): build helper executables only on manual requests

2026-09-23 19:52:50 +08:00

python-release.yml

chore(deps): update GitHub Actions to mature release tags

2026-10-07 22:28:27 +08:00

release-publish.yml

fix(ci): use the compatible pnpm setup action on Intel macOS

2026-10-07 23:17:10 +08:00

release-vendor-publish.yml

fix(ci): use the compatible pnpm setup action on Intel macOS

2026-10-07 23:17:10 +08:00

release-vendor.yml

fix(ci): use the compatible pnpm setup action on Intel macOS

2026-10-07 23:17:10 +08:00

release.yml

build: rename build:src and build:test to build:artifacts and build:check

2026-10-11 22:16:47 +08:00

sandbox.yml

fix(ci): use the compatible pnpm setup action on Intel macOS

2026-10-07 23:17:10 +08:00

weighted-approval-review-event.yml

fix: authenticate and reconcile approval delegations

2026-09-15 22:12:41 +08:00

weighted-approval.yml

feat(ci): publish the approval decision label from a dedicated approval App

2026-10-21 17:50:27 +08:00

windows-package.yml

fix(desktop): default Windows packaging to signed

2026-10-15 17:52:13 +08:00