Hugh Hackman fbb4dfcfc3 ci: add reusable dual-approval-check workflow ...

Adds a shared reusable workflow that plugin repos can call to enforce
the dual CTO+QA approval policy as a GitHub required status check.

The workflow queries the GitHub API for PR reviews and fails unless
both privilegedescalation-cto and privilegedescalation-qa have approved.
Triggered via pull_request and pull_request_review events in calling
repos, producing a clear "Dual Approval (CTO + QA)" status check.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-03-21 23:54:57 +00:00

..

scripts

Merge branch 'main' into ci/e2e-health-check

2026-03-21 14:06:10 +00:00

workflows

ci: add reusable dual-approval-check workflow

2026-03-21 23:54:57 +00:00

actionlint.yaml

fix: update runner label from local-ubuntu-latest to runners-privilegedescalation

2026-03-19 20:11:51 +00:00

FUNDING.yml

Add FUNDING.yml for org-wide GitHub Sponsors

2026-03-11 21:43:22 +00:00