Harden CI: Artifactory OIDC, fork-aware workflows, tightened permissions - #538

Open

MichaelGHSeg wants to merge 16 commits into

ci/harden-build-publish

Commits on Jul 9, 2026

Harden CI: Artifactory OIDC, fork-aware workflows, tightened permissions
MichaelGHSeg
committed
c8fbcdb

Commits on Jul 13, 2026

fix(ci): correct Artifactory OIDC provider name and exchange pattern
MichaelGHSeg
committed
ed0e411
Merge branch 'master' into ci/harden-build-publish
MichaelGHSeg
authored
4178514
fix(ci): move central-publishing-maven-plugin into release profile
MichaelGHSeg
committed
373795d
fix(ci): bump spotless-maven-plugin to 2.44.0 (available in Artifactory)
MichaelGHSeg
committed
fe56a63
fix(ci): route Maven plugin resolution through Artifactory
MichaelGHSeg
committed
d7edd3a
fix(ci): revert to virtual-maven-thirdparty (virtual-maven-twilio requires twilio org token)
MichaelGHSeg
committed
0a90b75

Commits on Jul 23, 2026

fix(ci): harden OIDC error redaction to cover all token fields
MichaelGHSeg
committed
2c48dbc

Commits on Sep 26, 2026