felipe/vibeflow-n8n
1
0
Fork 0
mirror of https://github.com/domfelipe/vibeflow-n8n.git synced 2026-08-07 14:56:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #2 from domfelipe/codex/vibeflow-release-pins

Browse source 
Pin Vibeflow release references
This commit is contained in:
Felipe Domingues 2026-07-22 11:47:59 -03:00 • committed by GitHub
commit 25d2d4db5e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

8
README.md
View file

@ -14,7 +14,7 @@ Vibeflow is not another workflow builder or MCP server. It is a deterministic qu
## Quick start ## Quick start
```bash ```bash
npx --yes github:domfelipe/vibeflow-n8n#v0.8.0 check workflow.json npx --yes github:domfelipe/vibeflow-n8n#4998605ed7dc12b9b867d69d7005d25778c7e109 check workflow.json
``` ```
Or from a checkout: Or from a checkout:
@ -73,8 +73,8 @@ Directories are searched recursively for `*.workflow.json` files.
### GitHub Action ### GitHub Action
```yaml ```yaml
- uses: actions/checkout@v4 - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
- uses: domfelipe/vibeflow-n8n@v0.8.0 - uses: domfelipe/vibeflow-n8n@4998605ed7dc12b9b867d69d7005d25778c7e109 # v0.8.0 code
with: with:
path: workflows/ path: workflows/
output: vibeflow.sarif output: vibeflow.sarif
@ -83,7 +83,7 @@ Directories are searched recursively for `*.workflow.json` files.
## Codex plugin ## Codex plugin
```bash ```bash
codex plugin marketplace add domfelipe/vibeflow-n8n codex plugin marketplace add domfelipe/vibeflow-n8n --ref 4998605ed7dc12b9b867d69d7005d25778c7e109
``` ```
Install **Vibeflow** from the Plugins Directory, then ask: Install **Vibeflow** from the Plugins Directory, then ask:

2
docs/release-audit.md
View file

@ -41,7 +41,7 @@ At the 5,000-node limit, the corrected linear traversal completed the synthetic
- The package has no runtime dependencies and uses a publish allowlist. - The package has no runtime dependencies and uses a publish allowlist.
- The bundled action always enables `--locked`. - The bundled action always enables `--locked`.
The first merge SHA must replace mutable self-references in the README and Codex skill before the release tag is created. The first merge SHA, `4998605ed7dc12b9b867d69d7005d25778c7e109`, pins the CLI, GitHub Action, and Codex marketplace examples before the release tag is created.
## Residual limitations ## Residual limitations

2
plugins/vibeflow/skills/vibeflow/SKILL.md
View file

@ -19,7 +19,7 @@ Use the CLI as the source of truth. Do not infer that a workflow is safe from it
For a released version without a checkout: For a released version without a checkout:
```bash ```bash
npx --yes github:domfelipe/vibeflow-n8n#v0.8.0 check path/to/workflow.json npx --yes github:domfelipe/vibeflow-n8n#4998605ed7dc12b9b867d69d7005d25778c7e109 check path/to/workflow.json
``` ```
3. Read [references/policies.md](references/policies.md) when interpreting or repairing a finding. 3. Read [references/policies.md](references/policies.md) when interpreting or repairing a finding.