feat(ci): rust pipeline with native-CLI hosting and binary distribution#25

Merged

ob-aion merged 47 commits into

mainfrom

feat/rust-packages

Jun 8, 2026

Commits on Jun 2, 2026

feat: add rust-packages pipeline and rust/base action
ob-aion
committed
refactor: align rust pipeline with npm-packages; drop redundant supply-chain job
ob-aion
committed
feat: restore cargo-deny supply-chain + --locked; document the model
ob-aion
committed
feat: firewall the npm fetch with Socket Firewall; document cooldown + policy
ob-aion
committed
docs: tighten the Security firewall note (straight ellipsis, shorter sentence)
ob-aion
committed
fix(release): drop misplaced rolling tag; share the commit-back step
ob-aion
committed
refactor(security): extract scanners to composites; manifest-gate osv
ob-aion
committed
feat(rust): OIDC publish, verify build, and supply-chain gate
ob-aion
committed
fix(javascript-npm-packages): gate publish on osv supply-chain scan
ob-aion
committed
feat(release): move v0 rolling tag on coroboros/ci's own release
ob-aion
committed
docs: brand-voice README, CHANGELOG, CLAUDE; bump to 0.2.0
ob-aion
committed
fix(security): drop unscannable bun.lockb from osv gate [skip ci]
ob-aion
committed
docs(security): note osv-scanner.toml exceptions [skip ci]
ob-aion
committed
feat(security): gate publish on gitleaks via a secrets job [skip ci]
ob-aion
committed
style(security): trim what-clause from secrets comment [skip ci]
ob-aion
committed
docs(security): note self-CI in the osv-scanner composable row
ob-aion
committed

Commits on Jun 3, 2026

Commits on Jun 6, 2026

Commits on Jun 8, 2026