Pin Docker publish inputs and remove rolling revalidation - #19

Merged

abmmhasan merged 9 commits into

mainfrom

fix/docker-publish-upstream-pinning

Sep 17, 2026

Commits on Sep 17, 2026

build: allow immutable publish inputs
abmmhasan
committed
d24966b
ci: pin and safely revalidate publish upstreams
abmmhasan
committed
a92cba4
test: cover rolling defaults and publish pins
abmmhasan
committed
8200e9a
test: enforce reproducible publish inputs
abmmhasan
committed
3ab7144
build: verify pinned Toolset installer
abmmhasan
committed
020e6f5
ci: publish only from immutable snapshot inputs
abmmhasan
committed
4c8fc86
test: align publish contracts with immutable snapshot flow
abmmhasan
committed
4440f0a
test: satisfy shellcheck for literal build contracts
abmmhasan
committed
0010435
test: quote literal workflow expressions
abmmhasan
committed
a3ff04f