| 1 | # Every pull request requests review from the maintainers below. |
| 2 | # Either maintainer can review and merge any change. |
| 3 | * @SivanCola @esengine |
| 4 | |
| 5 | # Keep the provider-side signing policy and its GitHub control plane under the |
| 6 | # same explicit review boundary as the machine-readable contract. |
| 7 | /.signpath/ @SivanCola @esengine |
| 8 | /.github/workflows/release-stable.yml @SivanCola @esengine |
| 9 | /.github/workflows/release-candidate.yml @SivanCola @esengine |
| 10 | /.github/workflows/release-candidate-verify.yml @SivanCola @esengine |
| 11 | /.github/workflows/release-promote.yml @SivanCola @esengine |
| 12 | /.github/workflows/release-verify.yml @SivanCola @esengine |
| 13 | /.github/workflows/release-desktop.yml @SivanCola @esengine |
| 14 | /scripts/complete-signpath-request.ps1 @SivanCola @esengine |
| 15 | /scripts/signpath-checkpoint.mjs @SivanCola @esengine |
| 16 | /scripts/package-windows-desktop.sh @SivanCola @esengine |
| 17 | /scripts/verify-windows-authenticode.ps1 @SivanCola @esengine |
| 18 | /scripts/finalize-windows-signed-candidate.sh @SivanCola @esengine |
| 19 | /scripts/release-candidate.mjs @SivanCola @esengine |
| 20 | /scripts/verify-release-artifact-archive.mjs @SivanCola @esengine |
| 21 | /scripts/release-candidate-tags.sh @SivanCola @esengine |
| 22 | /scripts/verify-release-authorization.sh @SivanCola @esengine |
| 23 | /scripts/resolve-release-candidate.mjs @SivanCola @esengine |
| 24 | /scripts/validate-release-control-plane.sh @SivanCola @esengine |
| 25 | /scripts/verify-stable-release-artifacts.sh @SivanCola @esengine |
| 26 | /cmd/signpath-contract/ @SivanCola @esengine |
| 27 |