chore: import agents.md inside claude.md (#1153) #7
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Sign instruction files with the official nono-attest GitHub Action. | |
| # | |
| # Produces Sigstore bundles containing DSSE envelopes with in-toto | |
| # statements that nono's trust pipeline can verify. Uses GitHub Actions | |
| # OIDC for identity; Fulcio issues a short-lived certificate carrying | |
| # the repository, workflow, and ref claims. | |
| # | |
| # Consumer-side verification: nono's pre-exec trust scan validates bundles | |
| # against the user's local trust-policy.json (keyed, signed by the user). | |
| name: Sign instruction files | |
| on: | |
| push: | |
| branches: [main] | |
| paths: | |
| - "SKILLS*" | |
| - "CLAUDE*" | |
| - "AGENT*" | |
| - ".claude/**/*.md" | |
| workflow_dispatch: | |
| permissions: | |
| id-token: write # Sigstore keyless OIDC token | |
| contents: write # Commit generated bundle files | |
| jobs: | |
| sign: | |
| if: github.repository == 'always-further/nono' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| - uses: always-further/agent-sign@c9426f1a00f823dd53e7b9068d910a68b43e49e9 # v0.0.11 |