Jordan Harband 6798d1dbc9 [actions] release.yml: provide GH_TOKEN so release-notes PR lookup can run ...

In GitHub Actions, `gh` refuses to run without a token,
and `release-notes.sh` fails closed on `gh` errors,
so the `make release` dry run died once the script was checked in.
The workflow already permits `api.github.com` egress and only needs the default read-only token.

2026-08-17 23:33:17 -07:00

..

ISSUE_TEMPLATE

[meta] disable blank issues

2024-11-04 15:07:16 +00:00

workflows

[actions] release.yml: provide GH_TOKEN so release-notes PR lookup can run

2026-08-17 23:33:17 -07:00

external-threat-actor.png

[security] add threat model

2023-11-15 10:10:29 -08:00

FUNDING.yml

[meta] create FUNDING.yml

2019-11-05 12:05:09 -08:00

INCIDENT_RESPONSE_PLAN.md

[meta] update security policy; add IRP

2025-06-23 16:11:48 -07:00

insider-threat-actor-and-libs.png

[security] add threat model

2023-11-15 10:10:29 -08:00

SECURITY.md

[security] add security escalation policy

2025-09-15 14:33:37 +02:00

THREAT_MODEL.md

[Docs] threat model: document the mirror payload/metadata trust boundary

2026-07-15 13:44:04 -07:00