Skip to content

ci(release-provenance): set top-level DO_NOT_TRACK=1 to satisfy workflow guard#687

Merged
blove merged 2 commits into
mainfrom
claude/fix-release-provenance-do-not-track
Jun 18, 2026
Merged

ci(release-provenance): set top-level DO_NOT_TRACK=1 to satisfy workflow guard#687
blove merged 2 commits into
mainfrom
claude/fix-release-provenance-do-not-track

Conversation

@blove

@blove blove commented Jun 18, 2026

Copy link
Copy Markdown
Contributor

Summary

The supply-chain-hardening guard added in #684 (scripts/ci-workflow.spec.mjs) asserts every workflow declares a top-level env: DO_NOT_TRACK: '1', but release-provenance.yml was missed. As a result the "Validate CI workflow guards" step (inside the CI scope job) fails on every PR, which cascades into the CI — required gate and blocks all merges.

This adds the one missing env block, matching the convention in ci.yml. The guard test now passes 11/11 locally (node --test scripts/ci-workflow.spec.mjs).

No behavior change — DO_NOT_TRACK=1 is a telemetry opt-out the guard already requires across the workflow suite.

🤖 Generated with Claude Code

…low guard

The supply-chain-hardening guard (scripts/ci-workflow.spec.mjs) added in #684
asserts every workflow sets a top-level DO_NOT_TRACK=1, but release-provenance.yml
was missed — so the 'Validate CI workflow guards' check fails on every PR. Add
the env block; guard test now passes 11/11.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@blove blove enabled auto-merge (squash) June 18, 2026 19:10
@vercel

vercel Bot commented Jun 18, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
threadplane Ready Ready Preview, Comment Jun 18, 2026 7:50pm

Request Review

@blove blove merged commit a09a06c into main Jun 18, 2026
26 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant