mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-07 19:32:17 +00:00
Remove the direct push-on-main trigger from security-codeql.yml so that the concurrency group no longer cancels the orchestrator-invoked scan. CodeQL now runs exactly once per CI run via ci-orchestrator.yml, and its failure continues to block code-quality-gate and all downstream deploy, install, and environment tests. Split the CI documentation along SPOT lines: workflows.md owns the per-workflow catalog (trigger, inputs, short description); pipeline.md owns the flow (stages, gates, concurrency, fork handling). Drop the duplicated entry-points table and per-stage workflow bullet lists from pipeline.md in favour of cross-references. Fix the stale "push to latest" wording that pre-dated the current branch prefix list. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
GitHub governance guides 🛡️
This directory contains contributor guidance for GitHub governance and repository controls. Its scope is branch protection, repository settings, GitHub Actions workflows and variables, and other platform rules that affect contributions.