Skip to content

feat: record workflow catalog provenance - #112

Merged
vitormattos merged 3 commits into
mainfrom
feat/workflow-lock-provenance
Sep 21, 2026
Merged

vitormattos merged 3 commits into
mainfrom
feat/workflow-lock-provenance

Conversation

@vitormattos

Copy link
Copy Markdown
Member

Closes #69.

Migrates consumer workflow locks from legacy two-column MD5 entries to a backward-compatible v2 JSON-lines format carrying SHA-256, workflow platform version, immutable github-workflows source commit and catalog commit. Legacy locks remain readable and migrate on the next successful synchronization without rewriting unchanged workflow YAML.

@vitormattos
vitormattos merged commit 4bfb312 into main Sep 21, 2026
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Record catalog provenance and workflow platform version in consumer lock

1 participant