The Desktop release fires on any desktop-v* tag push and consumes the repo-level signing secrets, so any write-access collaborator can cut a signed prod build. Reference the `release` environment from the build jobs so a designated reviewer must approve before the secrets are used. Takes effect once required reviewers are configured on that environment. Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| cli-e2e.yml | ||
| desktop-testing.yml | ||
| frontend-nightly.yml | ||
| frontend-release.yml | ||
| frontend.yml | ||
| gitleaks.yml | ||
| go.yml | ||
| prettier.yml | ||
| react-doctor.yml | ||
| testing-build.yml | ||