Evan Mattson a17102f9f5 Harden manual integration test trust boundary (#7081) ...

* Harden manual integration test workflow

Require two write-capable approvals for the exact PR head SHA, pin all targets to immutable commits, and narrow secret and OIDC access.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: b8c7d85f-7576-4fc7-a7b5-c77833344088

* Require integration workflow credentials

Declare credentials consumed by the reusable integration workflows as required while retaining the explicitly optional Foundry models key.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: b8c7d85f-7576-4fc7-a7b5-c77833344088

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-07-15 17:54:52 +00:00

..

check_team_membership.js

Automated issue triage workflow (#5419)

2026-04-23 20:22:04 +09:00

pr_limit_moderation.js

Don't count dependabot prs as part of the limit (#6317)

2026-06-04 08:31:36 +09:00

resolve_integration_test_target.js

Harden manual integration test trust boundary (#7081)

2026-07-15 17:54:52 +00:00

stale_issue_pr_ping.py

Update script to ping only on waiting-for-author label (#4812)

2026-03-20 19:39:22 +09:00

title_prefix.js

Python: Improve PR template and breaking-change label automation (#6473)

2026-06-15 10:55:23 +00:00