[SINT-4729] Add dd-octo-sts policies

[ikraemer-dd]

What does this PR do?

This PR adds 2 policies that will be used by Workflows running in this project:

• .github/chainguard/self.github.pre-commit.pull-requests.sts.yaml policy will be used by reusable-pre-commit.yml
• .github/chainguard/self.github.release.master.sts.yaml will be used by release.yml

This PR does not change the way workflows work, and is hence a non-risky change.

Additional Notes

Review checklist

Please check relevant items below:

• This PR includes all newly recorded cassettes for any modified tests.

• This PR does not rely on API client schema changes.

  • The CI should be fully passing.

• Or, this PR relies on API schema changes and this is a Draft PR that includes tests.

  • Note: CI shouldn't be run on this Draft PR, as its expected to fail without the corresponding schema changes.

[jack-edmonds-dd]

/merge

[gh-worker-devflow-routing-ef8351]

View all feedbacks in Devflow UI.

2026-02-10 16:50:37 UTC ℹ️ Start processing command /merge

---

2026-02-10 16:50:43 UTC ℹ️ MergeQueue: waiting for PR to be ready

This pull request is not mergeable according to GitHub. Common reasons include pending required checks, missing approvals, or merge conflicts — but it could also be blocked by other repository rules or settings.
It will be added to the queue as soon as checks pass and/or get approvals. View in MergeQueue UI.
Note: if you pushed new commits since the last approval, you may need additional approval.
You can remove it from the waiting list with /remove command.

---

2026-02-10 20:51:06 UTC ⚠️ MergeQueue: This merge request was unqueued

devflow unqueued this merge request: It did not become mergeable within the expected time

[ikraemer-dd]

/merge

[gh-worker-devflow-routing-ef8351]

View all feedbacks in Devflow UI.

2026-02-11 13:12:38 UTC ℹ️ Start processing command /merge

---

2026-02-11 13:12:45 UTC ℹ️ MergeQueue: waiting for PR to be ready

This pull request is not mergeable according to GitHub. Common reasons include pending required checks, missing approvals, or merge conflicts — but it could also be blocked by other repository rules or settings.
It will be added to the queue as soon as checks pass and/or get approvals. View in MergeQueue UI.
Note: if you pushed new commits since the last approval, you may need additional approval.
You can remove it from the waiting list with /remove command.

---

2026-02-11 17:18:11 UTC ⚠️ MergeQueue: This merge request was unqueued

devflow unqueued this merge request: It did not become mergeable within the expected time

[datadog-datadog-prod-us1]

⚠️ Tests

✨ Fix all issues with Cursor

⚠️ Warnings

❄️ 1 New flaky test detected

Create a rum-based metric returns "Created" response from classpath:com/datadog/api/client/v2/api/rum_metrics.feature:Rum Metrics (Datadog) (Fix with Cursor)

expected:<201> but was:<409>

🧪 102 Tests failed

    Get all invitations for a shared dashboard returns "OK" response from classpath:com/datadog/api/client/v1/api/dashboards.feature:Dashboards (Fix with Cursor)

    Get a shared dashboard returns "OK" response from classpath:com/datadog/api/client/v1/api/dashboards.feature:Dashboards (Fix with Cursor)

    Send shared dashboard invitation email returns "OK" response from classpath:com/datadog/api/client/v1/api/dashboards.feature:Dashboards (Fix with Cursor)

View all

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: a0bbc61 | Docs | Datadog PR Page | Was this helpful? Give us feedback!}

[jack-edmonds-dd]

/merge

[gh-worker-devflow-routing-ef8351]

View all feedbacks in Devflow UI.

2026-02-11 19:31:32 UTC ℹ️ Start processing command /merge

---

2026-02-11 19:31:39 UTC ℹ️ MergeQueue: waiting for PR to be ready

This pull request is not mergeable according to GitHub. Common reasons include pending required checks, missing approvals, or merge conflicts — but it could also be blocked by other repository rules or settings.
It will be added to the queue as soon as checks pass and/or get approvals. View in MergeQueue UI.
Note: if you pushed new commits since the last approval, you may need additional approval.
You can remove it from the waiting list with /remove command.

---

2026-02-11 19:32:27 UTC ℹ️ MergeQueue: This merge request was already merged

This pull request was merged directly.