ci(ceremony): build, test and publish the CCDP image (#28 follow-ups) - #33

Merged

xgreenx merged 17 commits into

feat/ceremony-rebuild-planfrom

ci/ccdp-image

Sep 14, 2026

Commits on Sep 14, 2026

fix(ceremony): emit exact SWS header rules and enable the health probe
xgreenx
committed
bccd2e5
feat(ceremony): verify release downloads against GitHub asset digests
xgreenx
committed
382b967
build(ceremony): keep distribution-graph.json in the CCDP image
xgreenx
committed
924a472
ci(ceremony): build, test and publish the CCDP image
xgreenx
committed
d265390
docs(ceremony): document publication, native SWS behavior and digests
xgreenx
committed
2acd156
fix(ceremony): replace the base image's served tree in the CCDP image
xgreenx
committed
39ec341
ci(ceremony): move the CCDP image job into a reusable workflow
xgreenx
committed
43c9ca9
ci(ceremony): publish the CCDP image under the release version
xgreenx
committed
13d4bac
docs(ceremony): document release publication of the CCDP image
xgreenx
committed
31c952f
ci(ceremony): keep pull-request CCDP builds read-only
xgreenx
committed
5eb0d0b
ci(ceremony): fail the retention seed closed on unexpected pull errors
xgreenx
committed
e5388a2
ci(ceremony): tag and promote the CCDP image by full commit sha
xgreenx
committed
01fea8b
build(ceremony): drop the release-asset digest lookup
xgreenx
committed
710b087
ci(ceremony): pin the SWS test binary's sha256 in the workflow
xgreenx
committed
4e7cb54
ci(release): promote only the tested main image, never rebuild
xgreenx
committed
6abb3b2
fix(ceremony): serve every 404 with an explicit no-store error policy
xgreenx
committed
5b831ae
docs(ceremony): align directory redirect qualification
Wondertan
committed
cb71602

Navigation Menu

ci(ceremony): build, test and publish the CCDP image (#28 follow-ups) - #33

ci(ceremony): build, test and publish the CCDP image (#28 follow-ups)#33
xgreenx merged 17 commits into
feat/ceremony-rebuild-planfrom
ci/ccdp-image

Commits on Sep 14, 2026

fix(ceremony): emit exact SWS header rules and enable the health probe

feat(ceremony): verify release downloads against GitHub asset digests

build(ceremony): keep distribution-graph.json in the CCDP image

ci(ceremony): build, test and publish the CCDP image

docs(ceremony): document publication, native SWS behavior and digests

fix(ceremony): replace the base image's served tree in the CCDP image

ci(ceremony): move the CCDP image job into a reusable workflow

ci(ceremony): publish the CCDP image under the release version

docs(ceremony): document release publication of the CCDP image

ci(ceremony): keep pull-request CCDP builds read-only

ci(ceremony): fail the retention seed closed on unexpected pull errors

ci(ceremony): tag and promote the CCDP image by full commit sha

build(ceremony): drop the release-asset digest lookup

ci(ceremony): pin the SWS test binary's sha256 in the workflow

ci(release): promote only the tested main image, never rebuild

fix(ceremony): serve every 404 with an explicit no-store error policy

docs(ceremony): align directory redirect qualification