pub fn render_workflow(
cfg: &VgiConfig,
opts: &PlanOptions<'_>,
repo: &Resource,
action: &str,
sha256: &str,
) -> StringExpand description
The workflow. Like the GitHub adapter’s, it has no if: vars.TRUST_REGISTRY_DID != '' guard: a skipped required job reports
success, so with the guard, deleting a variable would silently turn the
check off. Without it, a missing variable fails the check, closed.
The workflow and its job both carry the check name, so the status
context Forgejo reports is <name> / <name> (pull_request).
The namespace is the fallback resource (fallback_resource): the VTC
publishes namespace-wide commit rights on it, not on each repository.