Tobin South fe8f81309e

Bump bump-plugin-shas action so bump commits are signed (#1814) ...

The pinned version of anthropics/claude-plugins-community's
bump-plugin-shas action creates the bump commit with a local git commit,
which is unsigned and unmergeable under the required_signatures ruleset
on main. The new SHA creates the commit via the GraphQL
createCommitOnBranch mutation, which GitHub signs server-side, so weekly
bump PRs (e.g. #1809) become mergeable.

2026-05-11 20:45:40 +01:00

..

bump-plugin-shas.yml

Bump bump-plugin-shas action so bump commits are signed (#1814)

2026-05-11 20:45:40 +01:00

close-external-prs.yml

Update webhook closed PR message link to clau.de (#500)

2026-03-03 17:08:52 -08:00

scan-plugins.yml

Tighten policy scan: hook scope, telemetry, disclosure; make blocking (#1771)

2026-05-07 17:34:32 -05:00

validate-frontmatter.yml

Pin GitHub Actions to commit SHAs

2026-05-07 19:30:08 +00:00

validate-plugins.yml

Adopt validate-plugins action suite; pin all external SHAs (#1762)

2026-05-07 14:18:52 -05:00