feat: enforce supply chain policy

2026-09-10 16:04:04 +00:00 · 2026-08-31 21:32:03 +01:00
parent 0f1cc17af6
commit 91e536425d
8 changed files with 145 additions and 6 deletions
@@ -0,0 +1,18 @@
+name: Supply Chain Policy
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  repository-policy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Verify immutable image references and secret hygiene
+        run: make verify-supply-chain
+      - name: Verify release process is documented
+        run: test -s docs/SUPPLY-CHAIN.md