fix(ci): fail loudly on attestation lookup failure; decide the codecov pair (LAB-2528) - #270

Merged

27Bslash6 merged 10 commits into

mainfrom

lab-2528-attestation-codecov-fail-loud

Sep 14, 2026

Commits on Aug 31, 2026

fix(ci): fail loudly on attestation lookup failure; decide the codecov pair (LAB-2528)
27Bslash6
committed
0d1c0e9
fix(ci): apply expert-panel findings — draft/prerelease lookup, tag injection, fork-scoped codecov gate (LAB-2528)
27Bslash6
committed
228e904
fix(ci): close the fail-open the first fix introduced; scope the failure issue to the verify step (LAB-2528)
27Bslash6
committed
79df357
fix(ci): resolve the latest release server-side instead of paging for it
27Bslash6
committed
2fc24fc
chore(deps): bump pip constraint past PYSEC-2026-3721
27Bslash6
committed
e04f32e
docs(ci): sync the pip floor in both pip-audit rationales
27Bslash6
committed
8ec07c3

Commits on Sep 12, 2026

fix(ci): bump codecov-action to v7.0.0 so CLI signature verification can pass
Winston
committed
2ffb843
fix(ci): make the junit upload enforce the CLI signature too; tighten the pin note
Winston
committed
ade459d
docs(ci): record the fork-PR signature residual; scope the no-reports rationale
Winston
committed
09d508a

Commits on Sep 13, 2026

docs(ci): record why continue-on-error on the junit upload is visibility-only
Mark S
committed
d0bab42