Repository navigation

Harden releases: pin updates to the signing certificate, tag-only R2 mirror - #2

Merged

aryan1306 merged 2 commits into

mainfrom

chore/release-hardening

Sep 25, 2026

Merged

Harden releases: pin updates to the signing certificate, tag-only R2 mirror#2
aryan1306 merged 2 commits into
mainfrom
chore/release-hardening

Commits on Sep 25, 2026
- ci: publish to R2 only for tags and reword signing secret checks
  aryan1306
  committed
  cf77da8
- feat: only install updates signed by the release certificate
  aryan1306
  committed
  5c02d0a