Adam Moussa 3cde673b9d cd-cdk stacks input + org-baseline rename trust pair (#77) ... * Add stacks input to cd-cdk for multi-account apps cdk deploy was hardcoded to --all, which breaks when one CDK app defines stacks for two AWS accounts: whichever role the job assumed fails on the other account's stacks. Callers can now pass per-job stack selectors; default stays --all so existing callers are unaffected. * Trust seahaven-org-baseline sub on account-baseline deploy role Transition pair for the repo rename: OIDC sub claims carry the repo full name, so the renamed repo cannot assume the role until its sub is trusted. Old sub is removed after a post-rename deploy verifies green. * Pass stacks selector via env var, not expression interpolation Defense-in-depth from the security review: expression interpolation into run: is pre-shell text substitution, so metacharacters in the input would execute as script. Env-var expansion never re-parses shell syntax; word-splitting for multiple selectors is preserved.		2026-07-14 13:47:56 -04:00
..
ISSUE_TEMPLATE	INFRA-58 INFRA-59: org starter workflows + issue templates (#43)	2026-06-05 17:26:16 -04:00
workflows	cd-cdk stacks input + org-baseline rename trust pair (#77)	2026-07-14 13:47:56 -04:00
CODEOWNERS	Add org-wide default CODEOWNERS (#37)	2026-06-05 12:11:40 -04:00
dependabot.yml	Add org-wide reusable PR labeler (INFRA-56) (#50)	2026-06-11 13:34:39 -04:00
PULL_REQUEST_TEMPLATE.md	Add dependency-review workflow and Sea Haven PR checklist (#36)	2026-06-05 12:11:36 -04:00