Started by GitHub push by ti-chi-bot[bot]Started by GitHub push by ti-chi-bot[bot]00171261712641366413661.00638163811646fe7117f7f23eb90fee672c63ef17e8299c4bf3e9fe7117f7f23eb90fee672c63ef17e8299c4bf3e9origin/mainfe7117f7f23eb90fee672c63ef17e8299c4bf3e9fe7117f7f23eb90fee672c63ef17e8299c4bf3e9origin/mainfe7117f7f23eb90fee672c63ef17e8299c4bf3e9fe7117f7f23eb90fee672c63ef17e8299c4bf3e9origin/mainhttps://github.com/PingCAP-QE/ci.gitfalse#16464136643847seed #16461646falsefalse16463673258SUCCESS1776853717308https://do.pingcap.net/jenkins/job/seed/1646/default-mtb5n.ci/security-policy-allowlist.txtprow-jobs/pingcap-qe/ci/presubmits.yaml.ci/verify-jenkins-credential-policy.sh.ci/test-verify-jenkins-credential-policy.shdocs/guides/CI.mdfe7117f7f23eb90fee672c63ef17e8299c4bf3e91776853689000https://do.pingcap.net/jenkins/user/noreplynoreplynoreply@github.comci(security): add regression presubmit for credential policy checks (#4546) ## Summary Continue phased delivery after PR #4541 (remaining scope): - add regression test script `.ci/test-verify-jenkins-credential-policy.sh` - add new presubmit `pull-test-security-policy-scripts` to run these tests automatically - document the new regression gate in `docs/guides/CI.md` ## Why The earlier phase introduced credential policy checks. This PR adds positive/negative regression coverage so policy rules are stable and safe to evolve. ## Test - `bash -n .ci/test-verify-jenkins-credential-policy.sh` - `bash .ci/test-verify-jenkins-credential-policy.sh` 2026-04-22 10:28:09 +0000fe7117f7f23eb90fee672c63ef17e8299c4bf3e9ci(security): add regression presubmit for credential policy checkseditprow-jobs/pingcap-qe/ci/presubmits.yamladd.ci/test-verify-jenkins-credential-policy.shedit.ci/verify-jenkins-credential-policy.shadd.ci/security-policy-allowlist.txteditdocs/guides/CI.mdgithttps://do.pingcap.net/jenkins/user/noreplynoreply