From ea4788f469a90319f376ee8e6093363c792b3458 Mon Sep 17 00:00:00 2001 From: rldyourmnd Date: Wed, 14 Oct 2026 04:04:37 +0500 Subject: [PATCH 1/2] chore(setup): render Archive registration with unchanged CI pins Signed-off-by: rldyourmnd --- .gds/repository.yaml | 10 ++++++---- .github/workflows/ci.yml | 8 ++++---- .github/workflows/security.yml | 12 ++++++------ 3 files changed, 16 insertions(+), 14 deletions(-) diff --git a/.gds/repository.yaml b/.gds/repository.yaml index 22b4672..f16071f 100644 --- a/.gds/repository.yaml +++ b/.gds/repository.yaml @@ -5,21 +5,23 @@ repository: display_name: "codex-setup-system" roles: - "project" - lifecycle: "active" + lifecycle: "archived" provider: type: "github" - installation: "installation:github-nddev-technocracy-opennetwork" + installation: "installation:github-nddev-technocracy-archive" repository_id: 1343827743 - owner: "NDDev-Technocracy-OpenNetwork" + owner: "NDDev-Technocracy-Archive" name: "codex-setup-system" aliases: + - owner: "NDDev-Technocracy-OpenNetwork" + name: "codex-setup-system" - owner: "NDDev-Technocracy-Sandbox" name: "codex-setup-system" classification: portfolios: - - "portfolio:nddev-technocracy-opennetwork" + - "portfolio:nddev-technocracy-archive" visibility_contract: "public" data_classification: "public" diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 52493b2..d6d390d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -30,7 +30,7 @@ jobs: name: rust permissions: contents: read - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/rust-ci.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/rust-ci.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 with: toolchain: '1.98.1' # The three-OS matrix is the evidence ADR-0113 asks for, and standard @@ -47,7 +47,7 @@ jobs: name: supply-chain permissions: contents: read - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/rust-supply-chain.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/rust-supply-chain.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 with: enable_deny: true enable_audit: true @@ -74,7 +74,7 @@ jobs: name: actionlint permissions: contents: read - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/actionlint.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/actionlint.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 pr-hygiene: name: pr-hygiene @@ -86,7 +86,7 @@ jobs: # that would use them is off. issues: write # the stale bot closes threads pull-requests: write # the labeler applies labels - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/pr-hygiene.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/pr-hygiene.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 boundary: diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index e188cfd..f01359f 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -26,7 +26,7 @@ jobs: actions: read # CodeQL reads the workflow definitions it analyses contents: read security-events: write # CodeQL publishes its findings to code scanning - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/public-codeql.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/public-codeql.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 with: languages: '["rust", "actions"]' queries: security-and-quality @@ -37,7 +37,7 @@ jobs: permissions: contents: read pull-requests: write # writes the review it produces - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/public-dependency-review.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/public-dependency-review.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 with: fail_on_severity: moderate @@ -52,13 +52,13 @@ jobs: contents: read id-token: write # mints the OIDC token Scorecard's publication is signed with security-events: write # Scorecard publishes its findings to code scanning - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/public-scorecard.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/public-scorecard.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 osv: name: osv permissions: contents: read - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/osv-scan.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/osv-scan.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 zizmor: name: zizmor @@ -66,10 +66,10 @@ jobs: actions: read # the SARIF upload reads this run to attach its results contents: read security-events: write # zizmor publishes its findings to code scanning - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/zizmor-sarif.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/zizmor-sarif.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 secret-scan: name: secret-scan permissions: contents: read - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/secret-scan.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/secret-scan.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 From 2c951609d5226bbb7a4a4a9ef001166022ddbd22 Mon Sep 17 00:00:00 2001 From: rldyourmnd Date: Wed, 14 Oct 2026 04:04:45 +0500 Subject: [PATCH 2/2] chore(gds): regenerate the rendered provider registration Signed-off-by: rldyourmnd --- .gds/bundle.lock.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gds/bundle.lock.yaml b/.gds/bundle.lock.yaml index dde6b63..9564a6b 100644 --- a/.gds/bundle.lock.yaml +++ b/.gds/bundle.lock.yaml @@ -9,7 +9,7 @@ bundle: attestation_identity_digest: "sha256:a0bc45ec7864d753bab99bf690fe22eb327bf1f14fd53d946779e50df3f76f9b" projection: - input_digest: "sha256:bd90c96297b12b24c3c528902aea0d99996767cb06275cff3b05ad685dd953bc" + input_digest: "sha256:33e82adaae1b64005f9c423d8f0462292ce4d3c79bd5b803ead11f4b86ba964a" output_digest: "sha256:6dda7a265046e56f063fe8ed2588e5cc208ba212a897c571e24bf92294fd25e1" files: - path: ".gds/compiled-policy.json"