Harshit Singh Bhandari 2c377dcb7e ci(release): gate signed release on the release environment (#2249) ... The Desktop release fires on any desktop-v* tag push and consumes the repo-level signing secrets, so any write-access collaborator can cut a signed prod build. Reference the `release` environment from the build jobs so a designated reviewer must approve before the secrets are used. Takes effect once required reviewers are configured on that environment. Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>		2026-06-28 23:24:43 +05:30
..
actions/macos-signing-setup	feat: electron-updater feed publishing + macOS signing (#2220) (#2226)	2026-06-27 18:10:20 +05:30
workflows	ci(release): gate signed release on the release environment (#2249)	2026-06-28 23:24:43 +05:30
.gitleaks.toml	ci(gitleaks): allowlist historical false-positive commits from rewrite graft (#2169)	2026-06-27 23:07:35 +05:30