Harden CI: Artifactory OIDC, uv, PyPI Trusted Publishing - #535

Merged

MichaelGHSeg merged 14 commits into

ci/harden-build-publish

Aug 11, 2026

Commits on Jul 7, 2026

Harden CI: Artifactory OIDC, uv/pyproject.toml, PyPI Trusted Publishing
MichaelGHSeg
committed
f861bc8
Fix CI: replace third-party actions with pip installs per org policy
MichaelGHSeg
committed
7fb27d9
Fix Artifactory action: separate OIDC platform URL from PyPI index URL
MichaelGHSeg
committed
339f93a

Commits on Jul 23, 2026

fix(ci): harden OIDC error redaction to cover all token fields
MichaelGHSeg
committed
2beac9f
fix(ci): unset Artifactory index for verify-installable step to avoid curation age blocks on fresh deps
MichaelGHSeg
committed
b3d6c06
revert: restore Artifactory index for verify-installable step
MichaelGHSeg
committed
343a09d

Commits on Aug 10, 2026

Commits on Aug 11, 2026

fix(ci): apply ruff formatting and fix lint errors
MichaelGHSeg
committed
cb19c33
fix(ci): use org runner for all-checks job
MichaelGHSeg
committed
f53fd5e