Skip to content
Closed
Show file tree
Hide file tree
Changes from 13 commits
Commits
Show all changes
48 commits
Select commit Hold shift + click to select a range
e7c776a
test: define fail-closed workflow registry audit contract
seonghobae Aug 14, 2026
578b101
feat: add fail-closed workflow registry audit
seonghobae Aug 14, 2026
59b6a94
fix: keep workflow audit token on fixed GitHub API
seonghobae Aug 14, 2026
be28004
test: require protected-ref movement detection
seonghobae Aug 14, 2026
f84b5c6
fix: fail closed when protected ref moves
seonghobae Aug 14, 2026
6f6eaa0
test: lock authenticated audit reads to GitHub API
seonghobae Aug 14, 2026
a4f9dc7
test(workflows): expose same-count pagination drift
seonghobae Aug 14, 2026
8d0c6ed
fix(workflows): verify multi-page registry stability
seonghobae Aug 14, 2026
d1b8449
test(workflows): verify stable multi-page registry pass
seonghobae Aug 14, 2026
c33759e
test(workflows): require fixed HTTPS transport boundary
seonghobae Aug 14, 2026
580b757
fix(workflows): pin audit transport to HTTPS host
seonghobae Aug 14, 2026
93ba3ba
test(workflows): require fixed aiohttp origin boundary
seonghobae Aug 14, 2026
ab948ba
fix(workflows): use fixed-origin aiohttp transport
seonghobae Aug 14, 2026
3c6ae8a
test(workflows): expose commit-tree identity mismatch
seonghobae Aug 14, 2026
df2d4de
fix(workflows): resolve commit tree before registry audit
seonghobae Aug 14, 2026
fabaad7
test(workflows): separate protected commit and tree fixtures
seonghobae Aug 14, 2026
4dd0979
test(workflows): resolve protected commit tree in ref movement
seonghobae Aug 14, 2026
1514b16
test(workflows): resolve commit tree in stability fixtures
seonghobae Aug 14, 2026
1197fd4
test(workflows): expose rate-limit diagnostic ambiguity
seonghobae Aug 14, 2026
9d54970
fix(workflows): classify GitHub rate-limit failures
seonghobae Aug 14, 2026
a2920a5
test(workflows): prove slash ref path regression
seonghobae Aug 14, 2026
c2ca8b5
fix(workflows): preserve slash refs in GitHub paths
seonghobae Aug 14, 2026
8a1215c
test(workflows): reproduce dynamic registry identity gap
seonghobae Aug 14, 2026
7aa1ab9
fix(workflows): classify dynamic registry identities safely
seonghobae Aug 14, 2026
3cd6896
test(workflows): reproduce protected-ref namespace confusion
seonghobae Aug 14, 2026
5faf4be
fix(workflows): reject protected-ref namespace prefixes
seonghobae Aug 14, 2026
7618fc4
test(workflows): reject nonfinite audit timeouts
seonghobae Aug 15, 2026
2f6788c
fix(workflows): require finite audit timeout
seonghobae Aug 15, 2026
842610c
test(security): reject repository dot segments before transport
seonghobae Aug 15, 2026
bdb0fb3
fix(security): reject repository dot segments
seonghobae Aug 15, 2026
a50d803
test(audit): cover negative infinite timeout
seonghobae Aug 15, 2026
5c7c3e2
test(workflows): prove GitHub audit response is unbounded
seonghobae Aug 15, 2026
8770ad8
fix(workflows): bound GitHub audit response memory
seonghobae Aug 15, 2026
c54978c
test(workflows): exercise bounded aiohttp response stream
seonghobae Aug 15, 2026
09fc0de
test(workflows): prove recursive JSON fails closed
seonghobae Aug 15, 2026
5defb01
fix(workflows): normalize recursive JSON failure
seonghobae Aug 15, 2026
156f134
test(workflows): bound registry pagination cardinality
seonghobae Aug 15, 2026
77732cd
fix(workflows): bound registry audit cardinality
seonghobae Aug 15, 2026
150b71d
test(workflows): reject unknown workflow registry state
seonghobae Aug 15, 2026
6a48171
fix(workflows): reject unknown workflow registry states
seonghobae Aug 15, 2026
ca65227
test(workflows): require exact registry primitive types
seonghobae Aug 16, 2026
6140e45
test(workflows): reject hostile registry mappings
seonghobae Aug 16, 2026
124e5b3
fix(workflows): bound malformed registry primitive types
seonghobae Aug 16, 2026
7a71400
test(workflows): reject hostile audit boundary subclasses
seonghobae Aug 16, 2026
b336272
revert(workflows): restore pre-run audit branch after blocked fix
seonghobae Aug 16, 2026
4e87d9e
test(workflows): reject hostile audit boundary subclasses
seonghobae Aug 16, 2026
1127c75
fix(workflows): reject hostile audit boundary subclasses
seonghobae Aug 16, 2026
cc4362a
Merge branch 'main' into fix/workflow-registry-audit-d0a4b30
opencode-agent[bot] Aug 16, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Loading