From bd9b622a78e807675af6fca5849640d7a4f34a93 Mon Sep 17 00:00:00 2001 From: rldyourmnd Date: Wed, 14 Oct 2026 04:05:41 +0500 Subject: [PATCH 1/2] chore(setup): render Archive registration with unchanged CI pins Signed-off-by: rldyourmnd --- .gds/repository.yaml | 10 ++++++---- .github/workflows/ci.yml | 8 ++++---- .github/workflows/security.yml | 12 ++++++------ 3 files changed, 16 insertions(+), 14 deletions(-) diff --git a/.gds/repository.yaml b/.gds/repository.yaml index 47ec839..d412f93 100644 --- a/.gds/repository.yaml +++ b/.gds/repository.yaml @@ -5,21 +5,23 @@ repository: display_name: "opencode-setup-system" roles: - "project" - lifecycle: "active" + lifecycle: "archived" provider: type: "github" - installation: "installation:github-nddev-technocracy-opennetwork" + installation: "installation:github-nddev-technocracy-archive" repository_id: 1344237290 - owner: "NDDev-Technocracy-OpenNetwork" + owner: "NDDev-Technocracy-Archive" name: "opencode-setup-system" aliases: + - owner: "NDDev-Technocracy-OpenNetwork" + name: "opencode-setup-system" - owner: "NDDev-Technocracy-Sandbox" name: "opencode-setup-system" classification: portfolios: - - "portfolio:nddev-technocracy-opennetwork" + - "portfolio:nddev-technocracy-archive" visibility_contract: "public" data_classification: "public" diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d3cd2df..8ef441f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -30,7 +30,7 @@ jobs: name: rust permissions: contents: read - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/rust-ci.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/rust-ci.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 with: toolchain: '1.98.1' # The three-OS matrix is the evidence ADR-0113 asks for, and standard @@ -47,7 +47,7 @@ jobs: name: supply-chain permissions: contents: read - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/rust-supply-chain.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/rust-supply-chain.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 with: enable_deny: true enable_audit: true @@ -74,7 +74,7 @@ jobs: name: actionlint permissions: contents: read - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/actionlint.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/actionlint.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 pr-hygiene: name: pr-hygiene @@ -86,7 +86,7 @@ jobs: # that would use them is off. issues: write # the stale bot closes threads pull-requests: write # the labeler applies labels - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/pr-hygiene.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/pr-hygiene.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 boundary: diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index e188cfd..f01359f 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -26,7 +26,7 @@ jobs: actions: read # CodeQL reads the workflow definitions it analyses contents: read security-events: write # CodeQL publishes its findings to code scanning - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/public-codeql.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/public-codeql.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 with: languages: '["rust", "actions"]' queries: security-and-quality @@ -37,7 +37,7 @@ jobs: permissions: contents: read pull-requests: write # writes the review it produces - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/public-dependency-review.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/public-dependency-review.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 with: fail_on_severity: moderate @@ -52,13 +52,13 @@ jobs: contents: read id-token: write # mints the OIDC token Scorecard's publication is signed with security-events: write # Scorecard publishes its findings to code scanning - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/public-scorecard.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/public-scorecard.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 osv: name: osv permissions: contents: read - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/osv-scan.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/osv-scan.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 zizmor: name: zizmor @@ -66,10 +66,10 @@ jobs: actions: read # the SARIF upload reads this run to attach its results contents: read security-events: write # zizmor publishes its findings to code scanning - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/zizmor-sarif.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/zizmor-sarif.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 secret-scan: name: secret-scan permissions: contents: read - uses: NDDev-Technocracy-OpenNetwork/ci-workflows/.github/workflows/secret-scan.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 + uses: NDDev-Technocracy-Archive/ci-workflows-20261014/.github/workflows/secret-scan.yml@93eeb2a65e98a29e9dbff7909f67c6419abff046 # commit:93eeb2a65e98a29e9dbff7909f67c6419abff046 From 68d784c9435bcaa912c405fc3dd96cba3e19a8ec Mon Sep 17 00:00:00 2001 From: rldyourmnd Date: Wed, 14 Oct 2026 04:05:51 +0500 Subject: [PATCH 2/2] chore(gds): regenerate the rendered provider registration Signed-off-by: rldyourmnd --- .gds/bundle.lock.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gds/bundle.lock.yaml b/.gds/bundle.lock.yaml index b26f110..3cbd96b 100644 --- a/.gds/bundle.lock.yaml +++ b/.gds/bundle.lock.yaml @@ -9,7 +9,7 @@ bundle: attestation_identity_digest: "sha256:a0bc45ec7864d753bab99bf690fe22eb327bf1f14fd53d946779e50df3f76f9b" projection: - input_digest: "sha256:329a26db16367e2f7899fc83bee2c4c6fdff8e9aa72ce0381ab9a8304a4097c0" + input_digest: "sha256:192b2061863f24a6b722c63380f14a73b4ec69cee6dc9626449471853ce3e274" output_digest: "sha256:bab69662f7ff2e9c1e6037c3c6dfc5823231ef4eedfda6225b17cff3796bb1db" files: - path: ".gds/compiled-policy.json"