build(ci): fail closed on shader provenance

2026-06-25 13:07:58 +04:00
parent 7c3b3a53f5
commit 7c7e91c857
9 changed files with 733 additions and 18 deletions
@@ -112,6 +112,8 @@ jobs:
          echo "DYLD_FALLBACK_LIBRARY_PATH=$DYLD_FALLBACK_LIBRARY_PATH" >> "$GITHUB_ENV"
      - name: Install cargo-deny
        run: cargo install cargo-deny --version 0.19.9 --locked
+      - name: Verify shader provenance
+        run: cargo xtask shader-provenance
      - name: Run canonical CI gate
        run: cargo xtask ci
      - name: Run native Vulkan smoke