Files
Moshe Abramovitch 1700ebd31b Address review: fail loudly on parser issues, read allowlist from base tip
Per review feedback on #343:
- Preflight the YAML parser and make an unparsable allowlist fail the
  job with a visible error, instead of silently granting nothing.
- Read the allowlist from the tip of the base branch rather than the
  event's base SHA, so a re-run picks up entries merged after the PR
  was opened. Same security property: still base-branch content only.
- Note in the allowlist header that per-entry flow is a deliberate v1.

Signed-off-by: Moshe Abramovitch <moshea@nvidia.com>
2026-07-14 17:12:20 -07:00
..
2026-07-07 16:50:33 -05:00