Adam Perry @ OpenAI 93c79046d6 ci: fail jobs that dirty the worktree (#29720) ...

## Why

CI jobs should not silently leave tracked changes or untracked files in
the repository worktree.

## What

- Add a shared final worktree-cleanliness action to 19 checkout-bearing
PR and main CI jobs.
- Ignore the intentional SDK scratch directory and nested V8 checkout.
- Pin Bazelisk in shared CI setup so `.bazelversion` remains
authoritative, avoiding `MODULE.bazel.lock` deltas on Windows runners.
- Leave `rust-ci-full` and release-only workflows unchanged.
- Update `AGENTS.md` to discourage review bots from asking for
`MODULE.bazel.lock` changes.

93c79046d6 · 2026-06-24 11:06:35 -07:00

History

..

check-clean-worktree

ci: fail jobs that dirty the worktree (#29720)

2026-06-24 11:06:35 -07:00

linux-code-sign

ci: publish codex-app-server release artifacts (#19447)

2026-04-24 15:29:37 -07:00

prepare-bazel-ci

[codex] Fully qualify hash-pins in GitHub Actions (#21436)

2026-05-07 14:31:20 -07:00

run-argument-comment-lint

ci: keep argument comment lint checks materialized (#18926)

2026-04-22 03:36:46 +00:00

setup-akv-pkcs11-codesigning

ci: sign macOS release artifacts with Azure Key Vault (#26252)

2026-06-03 20:34:51 -07:00

setup-bazel-ci

ci: fail jobs that dirty the worktree (#29720)

2026-06-24 11:06:35 -07:00

setup-msvc-env

Fan out rust-ci-full nextest by platform (#23358)

2026-05-19 17:54:41 -07:00

setup-rusty-v8

ci: Use codex produced v8 artifacts for release builds (#23934)

2026-05-22 09:42:08 -07:00

windows-code-sign

[codex] Fully qualify hash-pins in GitHub Actions (#21436)

2026-05-07 14:31:20 -07:00