fix(ci/staging): sync audit-force-merge REQUIRED_CHECKS with branch protection (mc#798) #802

Merged
devops-engineer merged 1 commits from fix/798-audit-force-merge-staging-required-checks into staging 2026-05-13 08:11:30 +00:00

View File

@ -52,7 +52,10 @@ jobs:
# Declared here rather than fetched from /branch_protections
# because that endpoint requires admin write — sop-tier-bot is
# read-only by design (least-privilege).
#
# staging branch protection (§F3a/F3b, mc#798): only
# sop-checklist / all-items-acked is required. Unlike main,
# staging does not require sop-tier-check or Secret scan.
REQUIRED_CHECKS: |
sop-tier-check / tier-check (pull_request)
Secret scan / Scan diff for credential-shaped strings (pull_request)
sop-checklist / all-items-acked (pull_request)
run: bash .gitea/scripts/audit-force-merge.sh