ghost e28b883107 ci(preview): split PR image builds from trusted deploys (#2057) ...

* ci(preview): split PR image builds from trusted deploys

* ci(preview): harden preview artifact handoff

Move the preview image artifact into the trusted preview workflow as a no-secret build job, gate deployment on base-trusted workflow definitions, and keep Cloudflare credentials isolated to the deploy-only job.

Also fail closed when the pushed image reference is not written into wrangler.toml and expand the preview deploy guard to enforce the same-run artifact and permission boundaries.

* ci(preview): move preview builds out of privileged trigger

* ci(preview): avoid secret-shaped wrangler env assignments

* ci(preview): keep wrangler credential env explicit

2026-05-30 15:45:43 +02:00

..

brakeman

Disable brakeman --ensure-latest

2026-01-30 00:34:46 +01:00

bundle

Initial commit

2024-02-02 09:05:04 -06:00

codex-env

Keep Codex running with new 3.4.7 Ruby

2025-11-14 09:54:22 +01:00

dev

Feature: Implement Mobile Responsiveness (#2092)

2025-04-18 08:23:10 -05:00

docker-entrypoint

perf: use jemalloc as the default allocator (#1910)

2026-05-24 14:02:50 +02:00

importmap

Initial commit

2024-02-02 09:05:04 -06:00

preview_deploy_security_check.rb

ci(preview): split PR image builds from trusted deploys (#2057)

2026-05-30 15:45:43 +02:00

rails

Initial commit

2024-02-02 09:05:04 -06:00

rake

Initial commit

2024-02-02 09:05:04 -06:00

render-build.sh

Update render-build.sh

2025-05-07 10:00:24 -05:00

rubocop

Initial commit

2024-02-02 09:05:04 -06:00

setup

refactor(design-system): single-source design tokens via DTCG JSON (#1604)

2026-05-01 14:46:33 +02:00

tokens.mjs

refactor(design-system): single-source design tokens via DTCG JSON (#1604)

2026-05-01 14:46:33 +02:00

update_structure.sh

Personal finance AI (v1) (#2022)

2025-03-28 13:08:22 -04:00