Odigos GitHub Actions and Workflows

Authentication and Token Management

1. Github STS (GitHub Secure Token Service)

Ticket and Issue Management

1. require-linear
2. require-release-note

Build Configuration

1. resolve-build-labels

Security and Supply Chain

1. vulnerabilities-scanner
2. sign-oci — keyless cosign signing and SBOM attestation for published images
3. backfill-sign — break-glass: sign an already-published digest after an outage forced an unsigned release
4. cve-triage — map HIGH/CRITICAL image findings to the repo and manifest that owns them, minus the exceptions ledger
5. cve-linear-sync — one Linear issue per fix unit, delegated to Cursor; sweeps stalled ones

Supply-chain signing

See SIGNING.md — how signatures are made (keyless/Fulcio), where they live, and how to verify.

Release Management

1. tag-and-release
2. semver-info
3. cherry-pick
4. dispatch-agent-version-update
5. apply-agent-version-update
6. linear-release — record a published release and the issues it shipped in Linear

Release and Deployment Notifications

1. slack-release-notification

Package Management

1. upload-linux-packages