Harden CI: Artifactory OIDC via sdk-actions, NuGet lockfiles, scoped build - #146

Merged

MichaelGHSeg merged 8 commits into

mainfrom

ci/harden-build-publish

Sep 30, 2026

Commits on Jul 9, 2026

Harden CI: Artifactory OIDC, NuGet lockfiles, tightened permissions
MichaelGHSeg
committed
9579d32

Commits on Jul 10, 2026

Fix shell injection: pass github.ref_name via env var in deploy workflow
MichaelGHSeg
committed
66bd706

Commits on Jul 13, 2026

fix(ci): correct Artifactory OIDC provider name and exchange pattern
MichaelGHSeg
committed
eac9c64

Commits on Jul 23, 2026

fix(ci): harden OIDC error redaction to cover all token fields
MichaelGHSeg
committed
835eea8

Commits on Sep 26, 2026

Commits on Sep 28, 2026

fix(ci): publish from the deployment environment, where the key lives
MichaelGHSeg
committed
3f225bf

Commits on Sep 30, 2026

fix(ci): align the dotnet SDK with the targeted frameworks, scope the build
MichaelGHSeg
committed
780d847