Dylan M. Taylor 4b47a2a3c7 Sonar: [[ in sign-linux.sh, a linear trailer regex in refresh-contributors (S7688, S8786) (#193) ...

Clears both open SonarCloud issues.

- `actions/draft-release/sign-linux.sh`: `[[ ]]` in place of `[ ]` for bash tests (SonarCloud shell:S7688). Every script has a bash shebang; no test uses `-a`/`-o`, escaped parentheses or an unquoted pattern on the right of `=`.
- `actions/refresh-contributors/refresh_contributors.py` `model()`: `([^<>]*)<([^<>]+)>` on the stripped trailer, with the name stripped after, in place of `\s*(.*?)\s*<([^<>]+)>\s*` (python:S8786, backtracking). Same result for every Git identity: a name can't hold `<` or `>`.

2026-11-10 18:45:19 -05:00

..

arch-package

feat: allow additional Arch runtime dependencies (#161)

2026-11-06 19:33:10 -05:00

ast-grep

fix(ast-grep): end option parsing before the scanned paths

2026-11-02 22:17:40 -05:00

check-git-sources

Add git-sources.yml: the shared "Git dependencies come from storytold" check (#147)

2026-11-05 09:13:01 -05:00

checkout-craft-fonts

sonarcloud: measure Rust coverage with cargo-llvm-cov and import the LCOV report (#74)

2026-10-23 12:06:24 -04:00

checkout-craft-i18n

Shared quality-gate workflow for the craft apps (gate.yml) (#69)

2026-10-23 12:15:49 -04:00

draft-release

Sonar: [[ in sign-linux.sh, a linear trailer regex in refresh-contributors (S7688, S8786) (#193)

2026-11-10 18:45:19 -05:00

export-app-build-env

release.yml: export each app's build variables from its env.sh, so a new app needs no change here (#148)

2026-11-06 07:36:30 -05:00

freebsd-cargo-cache

fix(freebsd-cache): fall back to a compatible cache when manifests move (#41)

2026-10-22 15:00:48 -04:00

house-rules

Keep the house-rules rewrite on the checked AGENTS.md path.

2026-11-06 11:42:33 +01:00

import-macos-certificate

Add import-macos-certificate: the shared macOS signing certificate import (#140)

2026-11-05 09:08:39 -05:00

import-signing-key

Fix Linux signing rollout and review findings

2026-11-03 00:00:15 -05:00

install-apt-packages

fix(install-apt-packages): time-limit and retry mirror downloads (#117)

2026-11-01 02:05:24 +01:00

install-linux-deps

Revert "Install target libdbus headers for Linux portal builds (#57)" (#65)

2026-10-22 17:48:22 -04:00

install-nfpm

security(actions): stop evaluating tool-version inputs as shell/pwsh source (#45)

2026-10-22 11:40:53 -04:00

install-riscv64-cross

fix(install-riscv64-cross): read amd64 from the primary mirror (#150)

2026-11-05 22:47:15 -05:00

install-trunk

security(actions): stop evaluating tool-version inputs as shell/pwsh source (#45)

2026-10-22 11:40:53 -04:00

install-wix

security(actions): stop evaluating tool-version inputs as shell/pwsh source (#45)

2026-10-22 11:40:53 -04:00

packaging-lint

fix(packaging-lint): retry transient actionlint downloads (#176)

2026-11-08 14:16:10 +01:00

refresh-contributors

Sonar: [[ in sign-linux.sh, a linear trailer regex in refresh-contributors (S7688, S8786) (#193)

2026-11-10 18:45:19 -05:00

resolve-version

security(actions): harden apt package and resolve-version input handling (F-003, F-004)

2026-10-24 22:42:14 -04:00

setup-windows-signing

Add setup-windows-signing: the shared Authenticode signing script (#144)

2026-11-05 09:10:10 -05:00

sign-rpms

Sign the RPM packages in the Linux packaging jobs (#138)

2026-11-04 18:02:43 -05:00