Repository navigation

kix: warn when pull-request CI can write, and write down trust by stage - #434

Merged

moq-bot[bot] merged 13 commits into

mainfrom

quest/m1/kix/ci-read-only

Nov 3, 2026

Merged

kix: warn when pull-request CI can write, and write down trust by stage#434
moq-bot[bot] merged 13 commits into
mainfrom
quest/m1/kix/ci-read-only

Commits on Nov 3, 2026
- chore(quest): claim quest/m1/kix/ci-read-only.md
  kixelated
  committed
  6875dab
- feat(kix): warn when an enrolled repository's pull-request CI can write
  
  kixelated
  and
  claude
  committed
  550ecf1
- docs(kix): write down trust by stage and the read-only CI rule
  
  kixelated
  and
  claude
  committed
  e2fe7ff
- docs(kix): format the trust table
  
  kixelated
  and
  claude
  committed
  2f6e016
- fix(kix): look up protected branches beyond GitHub's first page
  
  kixelated
  and
  claude
  committed
  7bac40e
- fix(kix): bound the CI check by one read budget
  
  kixelated
  and
  claude
  committed
  445647f
- Merge origin/main into quest/m1/kix/ci-read-only
  
  kixelated
  and
  claude
  committed
  8d48990
- docs(kix): say what an unverified VM declaration does to an untrusted job
  
  kixelated
  and
  claude
  committed
  5fa3ef1
- Merge origin/main into quest/m1/kix/ci-read-only
  
  kixelated
  and
  claude
  committed
  597c5f3
- Merge origin/main into quest/m1/kix/ci-read-only
  kixelated
  committed
  1a1a6c4
- fix(kix): show the CI check beside the setup pull request's form
  
  kixelated
  and
  claude
  committed
  48f7533
- Merge origin/main into quest/m1/kix/ci-read-only
  kixelated
  committed
  53fb287
- Merge base into PR #434 and preserve CI and review imports
  quest fixer
  committed
  bae858f