npm - @kungfu-tech/buildchain - Versions diffs - 2.12.6 → 2.12.7-alpha.10 - Mend

@kungfu-tech/buildchain 2.12.6 → 2.12.7-alpha.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (40) hide show

package/actions/promote-buildchain-ref/README.md +11 -3
package/bin/buildchain.mjs +78 -0
package/dist/site/agent-index.json +1 -0
package/dist/site/artifact-schemas.json +1 -0
package/dist/site/buildchain-contract.json +163 -38
package/dist/site/buildchain-site.json +73 -17
package/dist/site/capability-registry.json +6 -5
package/dist/site/cli-registry.json +36 -0
package/dist/site/controller-registry.json +121 -10
package/dist/site/kfd-claims.json +305 -17
package/dist/site/kfd-upstream-aggregate.json +1 -1
package/dist/site/manual-registry.json +16 -2
package/dist/site/node-api-registry.json +43 -4
package/dist/site/page-registry.json +58 -11
package/dist/site/public-surface-audit.json +212 -19
package/dist/site/publication-authority-registry.json +778 -0
package/dist/site/publication-registry.json +4 -4
package/dist/site/release-provenance.json +4 -0
package/dist/site/site-manifest.json +15 -6
package/dist/site/workflow-registry.json +173 -12
package/docs/MAP.md +2 -1
package/docs/publication-artifacts.md +25 -18
package/docs/publication-authority.md +213 -0
package/docs/release-governance.md +3 -1
package/docs/shifu-gate-profiles.md +6 -0
package/package.json +5 -1
package/packages/core/buildchain-kfd-claims.js +5 -0
package/packages/core/buildchain-publication-authority.js +80 -0
package/packages/core/controller-evidence.js +8 -8
package/packages/core/index.js +35 -0
package/packages/core/publication-artifact-candidate.js +128 -0
package/packages/core/publication-authority.js +764 -0
package/packages/core/publication-control-plane-audit.js +135 -0
package/scripts/assemble-publication-artifact-admission.mjs +190 -0
package/scripts/assemble-self-publication-admission.mjs +183 -0
package/scripts/audit-publication-control-plane.mjs +409 -0
package/scripts/check-inventory.mjs +25 -2
package/scripts/generate-site-bundle.mjs +16 -0
package/scripts/publication-artifact-candidate.mjs +130 -0
package/scripts/workflow-friction-report.mjs +13 -2

package/dist/site/publication-authority-registry.json ADDED Viewed

@@ -0,0 +1,778 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-publication-authority-registry",
+  "defaultDecision": "deny",
+  "entries": [
+    {
+      "workflowPath": ".github/workflows/.binary-release-assets.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "github-release"
+      ],
+      "credentialMode": "github-token",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.binary-release-assets.yml",
+      "environment": "buildchain-release-assets",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.build.yml",
+      "authorityClass": "non-publication-oidc",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.build.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.publication-authority.yml",
+      "authorityClass": "evidence-publication",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.publication-authority.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.release-verify.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.release-verify.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.sam-release.yml",
+      "authorityClass": "retired-deny",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.sam-release.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.sam-verify.yml",
+      "authorityClass": "retired-deny",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.sam-verify.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.sync-remote-git.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.sync-remote-git.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.web-surface.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "web-production"
+      ],
+      "credentialMode": "oidc",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/.web-surface.yml",
+      "environment": "consumer-defined",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.wheel-release.yml",
+      "authorityClass": "retired-deny",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.wheel-release.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.wheel-verify.yml",
+      "authorityClass": "retired-deny",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.wheel-verify.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/binary-distribution.yml",
+      "authorityClass": "evidence-publication",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/binary-distribution.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/binary-release-assets.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/binary-release-assets.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/build-surface-fixture.yml",
+      "authorityClass": "non-publication-oidc",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/build-surface-fixture.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/build.yml",
+      "authorityClass": "non-publication-oidc",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/build.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/buildchain-alpha-self-dogfood.yml",
+      "authorityClass": "non-publication-oidc",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/buildchain-alpha-self-dogfood.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/buildchain-patrol-daily.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/buildchain-patrol-daily.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/buildchain-patrol-monthly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/buildchain-patrol-monthly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/buildchain-patrol-weekly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/buildchain-patrol-weekly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/buildchain-patrol.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/buildchain-patrol.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/buildchain-ref-promotion.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/buildchain-ref-promotion.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/buildchain-stable-candidate-patrol.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/buildchain-stable-candidate-patrol.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/dev-pr-auto-merge.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/dev-pr-auto-merge.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/npm-publish.yml",
+      "authorityClass": "dry-run-only",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/npm-publish.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/paper-release-sealed.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/paper-release-sealed.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/paper-release.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/paper-release.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/patrol-daily.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/patrol-daily.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/patrol-monthly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/patrol-monthly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/patrol-weekly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/patrol-weekly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/publication-artifact.yml",
+      "authorityClass": "evidence-publication",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/publication-artifact.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/release-candidate-promote.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "channel-ref",
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/release-candidate-promote.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/release-line-bootstrap.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/release-line-bootstrap.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/release-propagation.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/release-propagation.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/release-verify.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/release-verify.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/stable-candidate-patrol.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/stable-candidate-patrol.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    }
+  ],
+  "workflowFacts": [
+    {
+      "path": ".github/workflows/.binary-release-assets.yml",
+      "signals": [
+        "write-permission",
+        "environment",
+        "github-release"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.build.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.bump-minor-version.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.gate-profile.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.publication-authority.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.release-docker.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.release-elastic-beanstalk.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.release-new-version.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.release-verify.yml",
+      "signals": [
+        "write-permission",
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.sam-release.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.sam-verify.yml",
+      "signals": [
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.sync-release-page.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.sync-remote-git.yml",
+      "signals": [
+        "git-push"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.web-surface.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "environment",
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.wheel-release.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.wheel-verify.yml",
+      "signals": [
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/binary-distribution.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/binary-release-assets.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/build-surface-fixture.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/build.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/buildchain-alpha-self-dogfood.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/buildchain-patrol-daily.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/buildchain-patrol-monthly.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/buildchain-patrol-weekly.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/buildchain-patrol.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/buildchain-ref-promotion.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/buildchain-stable-candidate-patrol.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/buildchain-stable-candidate-qualification.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/candidate-lab.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/check.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/dev-pr-auto-merge.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/npm-publish.yml",
+      "signals": [
+        "npm-publish"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/paper-release-sealed.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/paper-release.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/patrol-daily.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/patrol-monthly.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/patrol-weekly.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/publication-artifact.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/release-candidate-promote.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/release-line-bootstrap.yml",
+      "signals": [
+        "write-permission",
+        "git-push"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/release-new-version.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/release-propagation.yml",
+      "signals": [
+        "write-permission",
+        "git-push"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/release-verify.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/schedule-purge-artifacts.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/self-hosted-runner-smoke.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/stable-candidate-patrol.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/verify.yml",
+      "signals": [],
+      "classified": false
+    }
+  ],
+  "registryDigest": "760215fb39e6c85890c925e924c538a766d78abd6319794c8799fb47c23dec3d"
+}