codex

mirror of https://github.com/pchuan98/codex.git synced 2026-07-01 00:31:56 +08:00

Files

T

Shijie Rao c3fcb0e745 Use Azure artifact signing environment secrets (#25945 )

## Why
Windows release signing should read Azure signing credentials from the
`azure-artifact-signing` environment instead of the old repo-level
`AZURE_TRUSTED_SIGNING_*` names. The smoke runs confirmed the
environment secrets resolve with the new `AZURE_ARTIFACT_SIGNING_*`
names once the Windows signing job is attached to that environment.

## What Changed
- Put the real Windows signing job in the `azure-artifact-signing`
environment.
- Switch the Windows signing action inputs from
`AZURE_TRUSTED_SIGNING_*` to `AZURE_ARTIFACT_SIGNING_*`.
- Drop the obsolete `workflow_call.secrets` declarations for the old
repo-level secret names; the caller continues to use `secrets: inherit`.
- Remove the temporary branch-trigger and Windows-only smoke-test
workflow changes before finalizing this PR.

## Validation
- `git diff --check -- .github/workflows/rust-release.yml
.github/workflows/rust-release-windows.yml`
- `ruby -e 'require "yaml"; ARGV.each { |f| YAML.load_file(f); puts
"yaml ok: #{f}" }' .github/workflows/rust-release.yml
.github/workflows/rust-release-windows.yml`

c3fcb0e745 · 2026-06-04 12:24:26 -07:00

History

actions

ci: sign macOS release artifacts with Azure Key Vault (#26252 )

2026-06-03 20:34:51 -07:00

codex

Fix minor typos in comments and documentation (#10287 )

2026-01-30 22:11:02 -08:00

ISSUE_TEMPLATE

feat(cli): add codex doctor diagnostics (#22336 )

2026-05-13 21:23:19 +00:00

scripts