- vulnerabilities-scanner
- sign-oci — keyless cosign signing and SBOM attestation for published images
- backfill-sign — break-glass: sign an already-published digest after an outage forced an unsigned release
See SIGNING.md — how signatures are made (keyless/Fulcio), where they live, and how to verify.
- tag-and-release
- semver-info
- cherry-pick
- dispatch-agent-version-update
- apply-agent-version-update
- linear-release — record a published release and the issues it shipped in Linear
