Merge branch 'master' into feat/external-secrets

Author: steveny91

.github/chainguard/self.release.tag-push.sts.yaml

@@ -0,0 +1,23 @@
+# Policy for: .github/workflows/release-trigger.yml in DataDog/integrations-extras
+# The release job calls integrations-core's reusable release-dispatch workflow
+#
+# Security model:
+#   - Workflow runs only from master or prerelease branches
+#   - Access is scoped to the reusable release workflow on master
+#   - Supports push and workflow_dispatch events only
+#
+# Permissions granted:
+#   - contents: write  - Create and push integration release tags
+
+issuer: https://token.actions.githubusercontent.com
+
+subject_pattern: repo:DataDog/integrations-extras:ref:refs/heads/(master|(alpha|beta|rc)/.+)
+
+claim_pattern:
+  event_name: (push|workflow_dispatch)
+  job_workflow_ref: DataDog/integrations-core/\.github/workflows/release-dispatch\.yml@refs/heads/master
+  ref: refs/heads/(master|(alpha|beta|rc)/.+)
+  repository: DataDog/integrations-extras
+
+permissions:
+  contents: write

.github/workflows/master.yml

@@ -65,5 +65,5 @@ jobs:
       pull-requests: write
       contents: write
 
-    uses: DataDog/integrations-core/.github/workflows/test-results-master.yml@574d63ba88365ffbab915280ceddbaa333c63d6a # master
+    uses: DataDog/integrations-core/.github/workflows/test-results-master.yml@5f6b58dfb609ea0afb37762612dbb6e2c37d2933 # master
     secrets: inherit

.github/workflows/pr.yml

@@ -13,7 +13,7 @@ concurrency:
 
 jobs:
   test:
-    uses: DataDog/integrations-core/.github/workflows/pr-test.yml@574d63ba88365ffbab915280ceddbaa333c63d6a # master
+    uses: DataDog/integrations-core/.github/workflows/pr-test.yml@5f6b58dfb609ea0afb37762612dbb6e2c37d2933 # master
     with:
       repo: extras
       python-version: "3.13"

.github/workflows/publish-test-results-pr.yml

@@ -9,7 +9,7 @@ on:
 
 jobs:
   publish:
-    uses: DataDog/integrations-core/.github/workflows/test-results-pr.yml@574d63ba88365ffbab915280ceddbaa333c63d6a # master
+    uses: DataDog/integrations-core/.github/workflows/test-results-pr.yml@5f6b58dfb609ea0afb37762612dbb6e2c37d2933 # master
     if: github.event.workflow_run.conclusion != 'skipped'
     permissions: # For test-results-pr.yml
       checks: write