Charlie Marsh afb1b3c984 Verify the pinned zsh manifest in release builds (#39056) ...

## Why

Release jobs download the `codex-zsh` manifest before packaging or signing its
bundled binaries. Verify that download against a pinned digest so an unexpected
manifest cannot enter release artifacts.

## What changed

- Pin the SHA-256 digest for the `codex-zsh-v0.1.0` manifest.
- Add a portable verification script that uses `sha256sum` or macOS `shasum`.
- Run verification in both the package archive and macOS helper signing flows.

GitOrigin-RevId: a404bb897c8cc0bf3c0ff38e8a6e1cce059d7fab

2026-08-17 19:30:38 +00:00

..

actions

Normalize rusty_v8 checksum manifest line endings (#36797)

2026-08-03 20:41:24 +00:00

codex

Fix minor typos in comments and documentation (#10287)

2026-01-30 22:11:02 -08:00

ISSUE_TEMPLATE

feat(cli): add codex doctor diagnostics (#22336)

2026-05-13 21:23:19 +00:00

scripts

Verify the pinned zsh manifest in release builds (#39056)

2026-08-17 19:30:38 +00:00

workflows

Verify the pinned zsh manifest in release builds (#39056)

2026-08-17 19:30:38 +00:00

blob-size-allowlist.txt

fix(guardian) Dont hard error on feature disable (#18795)

2026-04-20 19:54:39 -07:00

CODEOWNERS

Expand agent core ownership (#31675)

2026-07-08 18:04:44 -07:00

codex-cli-splash.png

Replaced user documentation with links to developers docs site (#8662)

2026-01-02 13:01:53 -07:00

dependabot.yaml

[codex] Apply a Dependabot cooldown of 7 days (#21599)

2026-05-07 16:07:46 -07:00

dotslash-argument-comment-lint-config.json

Publish runnable DotSlash package for argument-comment lint (#15198)

2026-03-19 18:59:02 +00:00

dotslash-config.json

dotslash: publish Codex entrypoints from package archives (#23638)

2026-05-20 12:18:10 -07:00

dotslash-zsh-config.json

release: publish standalone zsh artifacts (#30114)

2026-06-25 13:56:08 -07:00

pull_request_template.md

Clarify PR template invitation requirement (#19912)

2026-04-27 21:45:15 -07:00