ca2a-runtime 0.2.0__tar.gz → 0.3.0__tar.gz

{ca2a_runtime-0.2.0 → ca2a_runtime-0.3.0}/.github/CODEOWNERS

@@ -1,14 +1,14 @@
 # Default owners for all files
-* @agentrust-io/maintainers
+* @agentrust-io/maintainers @carloshvp @zohebk8s
 
 # Security-sensitive paths require security-reviewers sign-off
-src/ca2a_runtime/delegation/ @agentrust-io/security-reviewers @agentrust-io/maintainers
-src/ca2a_runtime/channel/ @agentrust-io/security-reviewers @agentrust-io/maintainers
-src/ca2a_runtime/tee/ @agentrust-io/security-reviewers @agentrust-io/maintainers
-src/ca2a_verify/ @agentrust-io/security-reviewers @agentrust-io/maintainers
+src/ca2a_runtime/delegation/ @agentrust-io/security-reviewers @agentrust-io/maintainers @carloshvp @zohebk8s
+src/ca2a_runtime/channel/ @agentrust-io/security-reviewers @agentrust-io/maintainers @carloshvp @zohebk8s
+src/ca2a_runtime/tee/ @agentrust-io/security-reviewers @agentrust-io/maintainers @carloshvp @zohebk8s
+src/ca2a_verify/ @agentrust-io/security-reviewers @agentrust-io/maintainers @carloshvp @zohebk8s
 
 # CI/CD workflow changes
-.github/workflows/ @agentrust-io/maintainers
+.github/workflows/ @agentrust-io/maintainers @carloshvp @zohebk8s
 
 # Package configuration
-pyproject.toml @agentrust-io/maintainers
+pyproject.toml @agentrust-io/maintainers @carloshvp @zohebk8s

{ca2a_runtime-0.2.0 → ca2a_runtime-0.3.0}/.github/dependabot.yml

@@ -17,3 +17,7 @@ updates:
       interval: "weekly"
       day: "monday"
     open-pull-requests-limit: 5
+    groups:
+      codeql-action:
+        patterns:
+          - "github/codeql-action*"

ca2a_runtime-0.3.0/.github/workflows/actionlint.yml

@@ -0,0 +1,41 @@
+name: Workflow lint
+
+# actionlint catches what a YAML parser cannot: duplicate mapping keys that
+# make GitHub refuse to load a workflow, invalid ${{ }} expressions, and shell
+# problems inside run: blocks. A duplicate env: key silently broke this repo
+# family's release workflow once; yaml.safe_load keeps the last value without
+# complaining, so local validation passed while Actions rejected the file.
+on:
+  push:
+    branches: [main]
+    paths: ['.github/workflows/**']
+  pull_request:
+    paths: ['.github/workflows/**']
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  actionlint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      # Fetched and checksum-verified rather than run as a third-party action,
+      # so this check adds no new action to the supply chain it exists to guard.
+      - name: Install actionlint
+        env:
+          ACTIONLINT_VERSION: 1.7.12
+          ACTIONLINT_SHA256: 8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8
+        run: |
+          set -euo pipefail
+          archive="actionlint_${ACTIONLINT_VERSION}_linux_amd64.tar.gz"
+          curl -sSfL -o "$archive" \
+            "https://github.com/rhysd/actionlint/releases/download/v${ACTIONLINT_VERSION}/${archive}"
+          echo "${ACTIONLINT_SHA256}  ${archive}" | sha256sum -c -
+          tar -xzf "$archive" actionlint
+          install -m 0755 actionlint /usr/local/bin/actionlint
+
+      - name: Lint workflows
+        run: actionlint -color

{ca2a_runtime-0.2.0 → ca2a_runtime-0.3.0}/.github/workflows/ci.yml

@@ -12,8 +12,13 @@ on:
         required: false
         default: ""
 
+permissions:
+  contents: read
 jobs:
   test:
+    permissions:
+      contents: read
+      id-token: write  # Authenticate coverage uploads with GitHub OIDC.
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
@@ -21,17 +26,26 @@ jobs:
         os: [ubuntu-latest, windows-latest]
 
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: actions/setup-python@v7
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: ${{ matrix.python-version }}
 
       - name: Install dependencies
-        run: python -m pip install --upgrade pip setuptools && pip install -e ".[dev]"
+        # Third-party dependencies come from the hash-pinned lock first; the
+        # local package then goes in with --no-deps, because pip cannot
+        # hash-pin an editable install in the same invocation.
+        run: python -m pip install --require-hashes -r requirements/dev.txt
+
+      - name: Install local package
+        run: python -m pip install --no-deps -e .
 
       - name: Security scan
-        run: pip install bandit pip-audit && bandit -r src/ -c pyproject.toml && pip-audit
+        # bandit and pip-audit are already in the dev extra above, so the
+        # scan runs against the same pinned versions rather than fetching
+        # whatever is current at scan time.
+        run: bandit -r src/ -c pyproject.toml && pip-audit
 
       - name: Lint
         run: ruff check src/ tests/
@@ -48,23 +62,31 @@ jobs:
         run: pytest tests/unit/ tests/conformance/ -v --tb=short --cov=src --cov-report=xml
 
       - name: Upload coverage report
-        uses: codecov/codecov-action@v7
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
-          fail_ci_if_error: false
+          use_oidc: true
+          files: coverage.xml
+          fail_ci_if_error: true
 
   governance:
     runs-on: ubuntu-latest
     needs: test
 
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: actions/setup-python@v7
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.12"
 
       - name: Install dependencies
-        run: python -m pip install --upgrade pip setuptools && pip install -e ".[dev]"
+        # Third-party dependencies come from the hash-pinned lock first; the
+        # local package then goes in with --no-deps, because pip cannot
+        # hash-pin an editable install in the same invocation.
+        run: python -m pip install --require-hashes -r requirements/dev.txt
+
+      - name: Install local package
+        run: python -m pip install --no-deps -e .
 
       # AGT 4.1 currently constrains cryptography below 49, while the runtime
       # requires 50+ for published security fixes. Keep the scanner isolated
@@ -73,8 +95,10 @@ jobs:
       - name: Install governance tooling in an isolated environment
         run: |
           python -m venv .agt-venv
-          .agt-venv/bin/pip install "agent-governance-toolkit[full]>=4.1"
-          .agt-venv/bin/pip install --upgrade --no-deps "cryptography>=50.0"
+          # --no-deps because the lock already lists every transitive
+          # dependency, and pip would otherwise re-resolve and reject the
+          # cryptography override the compile deliberately applied.
+          .agt-venv/bin/pip install --require-hashes --no-deps -r requirements/agt.txt
 
       - name: Generate evidence file
         run: python scripts/gen_agt_evidence.py
@@ -89,7 +113,7 @@ jobs:
         run: .agt-venv/bin/agt --json verify --evidence agt-evidence.json > agt-attestation.json
 
       - name: Upload governance artifacts
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0
         with:
           name: agt-governance-${{ github.sha }}
           path: |
@@ -103,20 +127,26 @@ jobs:
     if: github.ref == 'refs/heads/main'
 
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: actions/setup-python@v7
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.12"
 
       - name: Install dependencies
-        run: python -m pip install --upgrade pip setuptools && pip install -e ".[dev]"
+        # Third-party dependencies come from the hash-pinned lock first; the
+        # local package then goes in with --no-deps, because pip cannot
+        # hash-pin an editable install in the same invocation.
+        run: python -m pip install --require-hashes -r requirements/dev.txt
+
+      - name: Install local package
+        run: python -m pip install --no-deps -e .
 
       - name: Run benchmark (software-only, CI gate p99 < 5ms)
         run: python -m ca2a_runtime.benchmarks --provider software-only --hops 10000 --out benchmarks/
 
       - name: Upload benchmark results
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0
         with:
           name: benchmark-results
           path: benchmarks/

{ca2a_runtime-0.2.0 → ca2a_runtime-0.3.0}/.github/workflows/codeql.yml

@@ -25,19 +25,19 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.37.6
+        uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
         with:
           languages: python
           queries: +security-extended
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v4.37.6
+        uses: github/codeql-action/autobuild@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4.37.6
+        uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
         continue-on-error: true
         with:
           category: /language:python

{ca2a_runtime-0.2.0 → ca2a_runtime-0.3.0}/.github/workflows/contributor-check.yml

@@ -27,7 +27,7 @@ jobs:
       github.actor != 'imran-siddique'
     steps:
       - name: Checkout org action
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: agentrust-io/.github
           # Pinned deliberately: this workflow runs on pull_request_target

{ca2a_runtime-0.2.0 → ca2a_runtime-0.3.0}/.github/workflows/docker.yml

@@ -15,6 +15,9 @@ on:
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
 
+permissions:
+  contents: read
+
 jobs:
   build-pr:
     if: github.event_name == 'pull_request'
@@ -24,10 +27,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Build image without publishing
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7
         with:
           context: .
           push: false
@@ -44,7 +47,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Log in to GitHub Container Registry
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
@@ -59,7 +62,7 @@ jobs:
 
       - name: Build and push
         id: build
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7
         with:
           context: .
           push: true
@@ -68,15 +71,15 @@ jobs:
             ghcr.io/agentrust-io/ca2a-runtime:latest
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@f713795cb21599bc4e5c4b58cbad1da852d7eeb9 # v3
+        uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
 
       - name: Sign the image (keyless, by digest)
         env:
           DIGEST: ${{ steps.build.outputs.digest }}
-        run: cosign sign --yes ghcr.io/agentrust-io/ca2a-runtime@${DIGEST}
+        run: cosign sign --yes "ghcr.io/agentrust-io/ca2a-runtime@${DIGEST}"
 
       - name: Attest build provenance (SLSA)
-        uses: actions/attest-build-provenance@8beda2b7ed98355c0e97c0a63bec38ae472e66c4 # v4
+        uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4
         with:
           subject-name: ghcr.io/agentrust-io/ca2a-runtime
           subject-digest: ${{ steps.build.outputs.digest }}

{ca2a_runtime-0.2.0 → ca2a_runtime-0.3.0}/.github/workflows/docs.yml

@@ -14,6 +14,14 @@ on:
       - "ROADMAP.md"
       - "LIMITATIONS.md"
       - "CNAME"
+      - "overrides/**"
+      - "index.md"
+      - "CHARTER.md"
+      - "CODE_OF_CONDUCT.md"
+      - "SECURITY.md"
+      - "PRIVACY.md"
+      - "robots.txt"
+      - "hooks/**"
   workflow_dispatch:
 
 permissions:
@@ -29,19 +37,20 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-python@v7
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.11"
           cache: pip
 
       - name: Install docs dependencies
         run: |
-          pip install -r requirements-docs.txt
-          pip install -e ".[dev]"
+          pip install --require-hashes -r requirements/docs.txt
+          pip install --require-hashes -r requirements/dev.txt
+          pip install --no-deps -e .
 
       - name: Configure git for gh-deploy
         run: |
@@ -55,7 +64,7 @@ jobs:
 
           if [ -d docs ]; then cp -r docs $BUILD/docs; fi
 
-          for fname in README.md CHANGELOG.md CONTRIBUTING.md GOVERNANCE.md ROADMAP.md LIMITATIONS.md CNAME; do
+          for fname in index.md CHANGELOG.md CONTRIBUTING.md GOVERNANCE.md CHARTER.md CODE_OF_CONDUCT.md SECURITY.md PRIVACY.md ROADMAP.md LIMITATIONS.md SPONSORS.md CNAME robots.txt; do
             if [ -f "$fname" ]; then cp "$fname" "$BUILD/$fname"; fi
           done
 

ca2a_runtime-0.3.0/.github/workflows/limitations-parity.yml

@@ -0,0 +1,75 @@
+name: Limitations parity
+
+# The SEV-SNP platform-state caveat in LIMITATIONS.md is shared verbatim with
+# agentrust-io/trace-spec and agentrust-io/cmcp, because the gap it describes is a
+# property of the shared TEE provider layer rather than of any one project. Three
+# hand-maintained copies of a security caveat drift, and the copy that goes stale
+# is the one that quietly overstates what the project checks.
+#
+# The full text stays in this file on purpose: LIMITATIONS.md exists to state the
+# bounds where a reader will actually meet them, not to send them somewhere else.
+# This job keeps the copies honest instead of thinning them out.
+#
+# Same shape as the schema-parity check in agentrust-io/agentrust-io.github.io.
+# Only the text between the markers is compared. The project-specific paragraph
+# after the end marker is this repository's own.
+
+on:
+  push:
+    branches: [main]
+    paths: ['LIMITATIONS.md', '.github/workflows/limitations-parity.yml']
+  pull_request:
+    paths: ['LIMITATIONS.md', '.github/workflows/limitations-parity.yml']
+  schedule:
+    # trace-spec can change without anything happening here, so also check daily.
+    - cron: '41 6 * * *'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  parity:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Compare the shared block with trace-spec
+        run: |
+          set -euo pipefail
+          src=https://raw.githubusercontent.com/agentrust-io/trace-spec/main/LIMITATIONS.md
+          begin='<!-- shared:platform-state-appraisal begin -->'
+          end='<!-- shared:platform-state-appraisal end -->'
+
+          extract() {
+            awk -v b="$begin" -v e="$end" '
+              index($0, b) { grab = 1; next }
+              index($0, e) { grab = 0 }
+              grab { print }
+            ' "$1"
+          }
+
+          if ! curl -fsSL "$src" -o /tmp/upstream.md; then
+            echo "::error::could not fetch $src"
+            exit 1
+          fi
+
+          extract LIMITATIONS.md > /tmp/local.txt
+          extract /tmp/upstream.md > /tmp/remote.txt
+
+          if [ ! -s /tmp/local.txt ]; then
+            echo "::error::LIMITATIONS.md has no shared:platform-state-appraisal block"
+            exit 1
+          fi
+          if [ ! -s /tmp/remote.txt ]; then
+            echo "::error::trace-spec/LIMITATIONS.md has no shared:platform-state-appraisal block"
+            exit 1
+          fi
+
+          if diff -u /tmp/remote.txt /tmp/local.txt; then
+            echo "ok  shared block matches trace-spec"
+          else
+            echo "::error::the shared block has drifted from trace-spec/LIMITATIONS.md."
+            echo "::error::Edit it in trace-spec first, then copy the block here."
+            exit 1
+          fi

{ca2a_runtime-0.2.0 → ca2a_runtime-0.3.0}/.github/workflows/release-drafter.yml

@@ -5,21 +5,25 @@ on:
     tags:
       - "v*.*.*"
 
+permissions:
+  contents: read
+
 jobs:
   draft-release:
     runs-on: ubuntu-latest
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
 
       - name: Create GitHub Release
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REF_NAME: ${{ github.ref_name }}
         run: |
-          gh release create "${{ github.ref_name }}" \
-            --title "ca2a ${{ github.ref_name }}" \
+          gh release create "$REF_NAME" \
+            --title "ca2a $REF_NAME" \
             --generate-notes \
             --draft

{ca2a_runtime-0.2.0 → ca2a_runtime-0.3.0}/.github/workflows/release.yml

@@ -11,14 +11,14 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.12"
 
       - name: Install release tooling
-        run: python -m pip install build twine
+        run: python -m pip install --require-hashes -r requirements/release.txt
 
       - name: Verify release tag matches package version
         run: |
@@ -32,17 +32,25 @@ jobs:
         run: python -m twine check dist/*
 
       - name: Install and smoke-test wheel
+        env:
+          # The tag name is data, not code: ${{ }} expands before the shell
+          # (and before python -c) ever sees the line.
+          REF_NAME: ${{ github.ref_name }}
         run: |
           python -m venv /tmp/ca2a-wheel
           /tmp/ca2a-wheel/bin/python -m pip install dist/*.whl
-          /tmp/ca2a-wheel/bin/python -c 'import importlib.metadata, ca2a_runtime; expected="${{ github.ref_name }}"[1:]; assert importlib.metadata.version("ca2a-runtime") == expected; assert ca2a_runtime.__version__ == expected'
+          /tmp/ca2a-wheel/bin/python -c 'import importlib.metadata, os, ca2a_runtime; expected=os.environ["REF_NAME"][1:]; assert importlib.metadata.version("ca2a-runtime") == expected; assert ca2a_runtime.__version__ == expected'
           /tmp/ca2a-wheel/bin/ca2a --help
 
       - name: Install and smoke-test source distribution
+        env:
+          # The tag name is data, not code: ${{ }} expands before the shell
+          # (and before python -c) ever sees the line.
+          REF_NAME: ${{ github.ref_name }}
         run: |
           python -m venv /tmp/ca2a-sdist
           /tmp/ca2a-sdist/bin/python -m pip install dist/*.tar.gz
-          /tmp/ca2a-sdist/bin/python -c 'import importlib.metadata, ca2a_runtime; expected="${{ github.ref_name }}"[1:]; assert importlib.metadata.version("ca2a-runtime") == expected; assert ca2a_runtime.__version__ == expected'
+          /tmp/ca2a-sdist/bin/python -c 'import importlib.metadata, os, ca2a_runtime; expected=os.environ["REF_NAME"][1:]; assert importlib.metadata.version("ca2a-runtime") == expected; assert ca2a_runtime.__version__ == expected'
           /tmp/ca2a-sdist/bin/ca2a --help
 
       - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
@@ -71,14 +79,16 @@ jobs:
       contents: write # upload release assets
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.12"
 
       - name: Install package
-        run: python -m pip install --upgrade pip && pip install -e "."
+        run: |
+          python -m pip install --require-hashes -r requirements/dev.txt
+          python -m pip install --no-deps -e .
 
       # Isolate AGT's tooling dependencies from the release artifact. AGT 4.1
       # constrains cryptography below 49; cA2A requires 50+ security fixes. The
@@ -87,8 +97,10 @@ jobs:
       - name: Install governance tooling in an isolated environment
         run: |
           python -m venv .agt-venv
-          .agt-venv/bin/pip install "agent-governance-toolkit[full]>=4.1"
-          .agt-venv/bin/pip install --upgrade --no-deps "cryptography>=50.0"
+          # --no-deps because the lock already lists every transitive
+          # dependency, and pip would otherwise re-resolve and reject the
+          # cryptography override the compile deliberately applied.
+          .agt-venv/bin/pip install --require-hashes --no-deps -r requirements/agt.txt
 
       - name: Generate evidence file
         run: python scripts/gen_agt_evidence.py
@@ -101,6 +113,7 @@ jobs:
 
       - name: Attach evidence to release
         if: github.event_name == 'release'
-        run: gh release upload ${{ github.ref_name }} agt-evidence.json agt-attestation.json
+        run: gh release upload "$REF_NAME" agt-evidence.json agt-attestation.json
         env:
           GITHUB_TOKEN: ${{ github.token }}
+          REF_NAME: ${{ github.ref_name }}

{ca2a_runtime-0.2.0 → ca2a_runtime-0.3.0}/.github/workflows/require-maintainer-approval.yml

@@ -25,7 +25,7 @@ jobs:
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
-            const MAINTAINERS = ['imran-siddique', 'pforest', 'podcastinator', 'carloshvp', 'Qiang-Xu', 'zohebk8s'];
+            const MAINTAINERS = ['imran-siddique', 'pforest', 'podcastinator', 'carloshvp', 'Qiang-Xu', 'zohebk8s', 'AaronRoeF'];
 
             const author = context.payload.pull_request.user.login;
             if (MAINTAINERS.includes(author)) {

{ca2a_runtime-0.2.0 → ca2a_runtime-0.3.0}/.github/workflows/sbom.yml

@@ -10,21 +10,23 @@ env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
 
 permissions:
-  contents: write
-  id-token: write
+  contents: read
 
 jobs:
   sbom:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Generate SBOM
-        uses: anchore/sbom-action@v0
+        uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2
         with:
           format: spdx-json
           output-file: sbom.spdx.json
       - name: Upload SBOM artifact
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: sbom
           path: sbom.spdx.json

{ca2a_runtime-0.2.0 → ca2a_runtime-0.3.0}/.github/workflows/scorecard.yml

@@ -23,7 +23,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
           fetch-depth: 0
@@ -38,6 +38,6 @@ jobs:
           publish_results: true
 
       - name: Upload SARIF
-        uses: github/codeql-action/upload-sarif@v4.37.6
+        uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
         with:
           sarif_file: scorecard-results.sarif