Files
node/scripts
beardthelion e005dda59c ci(release): require backfill release assets to be automation-uploaded
The npm backfill republishes GitHub release assets, which are mutable for
anyone with contents: write. Require every asset on the release to have
been uploaded by github-actions[bot], matching the release-author check.
Not a hard bound, but it removes the direct edit path and leaves a review
signal when a hand-uploaded asset blocks a backfill.
2026-09-13 09:03:30 -05:00
..