fix(ci): detect orphaned Actions workflow identities - #279

Draft

seonghobae wants to merge 22 commits into

mainfrom

fix/actions-workflow-registry-audit-278

Commits on Aug 12, 2026

test(ci): define Actions registry recurrence audit
seonghobae
committed
d20cb19
test(ci): keep registry audit RED type-safe
seonghobae
committed
a57990b
fix(ci): classify Actions workflow registry drift
seonghobae
committed
88c3f72
test(ci): reject undocumented workflow registry states
seonghobae
committed
d4f700c
fix(ci): fail closed on unknown workflow states
seonghobae
committed
914bbf3
test(ci): reject malformed workflow registry UTF-8
seonghobae
committed
6790ebb
fix(ci): reject malformed workflow registry UTF-8
seonghobae
committed
aee3439
test(ci): fail closed on short registry pages
seonghobae
committed
f6a19a9
fix(ci): reject incomplete registry pagination shape
seonghobae
committed
c981650
test(ci): detect default-branch movement during registry audit
seonghobae
committed
11319f5
fix(ci): fail closed on workflow audit branch movement
seonghobae
committed
371205b
test(ci): preflight registry audit input size
seonghobae
committed
7effc38
fix(ci): bound registry audit fixture reads
seonghobae
committed
6ee2628

Commits on Aug 13, 2026

test(ci): reject non-canonical workflow registry paths
seonghobae
committed
eb467f9

Commits on Aug 14, 2026

fix(ci): keep non-canonical workflow paths unresolved
seonghobae
committed
fbc30a5
test(ci): reject ambiguous reused workflow identities
seonghobae
committed
504e094
fix(ci): fail closed on reused workflow identities
seonghobae
committed
6b54294
test(ci): bind repair workflow ownership evidence
seonghobae
committed
a9f207c
test(ci): require exact repair owner evidence
seonghobae
committed
81bccd0
fix(ci): bind repair workflow exemptions to exact owners
seonghobae
committed
955e522

Commits on Aug 17, 2026