fix(security): consume verified audits in offline image rebuilds - #11156

Merged

cv merged 108 commits into

mainfrom

fix/npm-audit-incomplete-11088

Sep 11, 2026

Commits on Sep 7, 2026

fix: carry reviewed npm audit into protected builds
sandl99
committed
6268385
refactor: narrow protected audit fix
sandl99
committed
ddca63d
fix: order audit response type guards
sandl99
committed
3d4672a
fix: carry audit through protected cache seed
sandl99
committed
db2b598
test: model protected audit verification helper
sandl99
committed
a88afed
fix(security): pin protected audit evidence paths
sandl99
committed
46f28b5

Commits on Sep 8, 2026

Merge branch 'main' into fix/npm-audit-incomplete-11088
sandl99
authored
fcd1873
refactor: reduce protected audit handoff
sandl99
committed
cd32fc1
fix: preserve audit evidence in protected cache
sandl99
committed
be13769
test: stage protected audit verifier in fixtures
sandl99
committed
38ee435
Merge branch 'main' into fix/npm-audit-incomplete-11088
sandl99
authored
5eaf8f5
Merge branch 'main' into fix/npm-audit-incomplete-11088
sandl99
authored
d4c2731
fix(security): preserve protected audit isolation
rsliter
committed
cd3679e
fix(images): preserve audit RUN parsing
rsliter
committed
08bb2e2
merge(security): refresh protected audit fix
rsliter
committed
8ac4d29
fix(images): clean failed protected cache exports
rsliter
committed
253f247
test(security): verify protected audit handoff
rsliter
committed
5073932
test(security): keep audit handoff setup direct
rsliter
committed
bdf27c8
test(security): rely on audit verifier bindings
rsliter
committed
e7b9017
merge(security): refresh protected audit handoff
rsliter
committed
31d6876
fix(images): retry reviewed audit export
rsliter
committed
ff73c97
merge(images): refresh reviewed audit export
rsliter
committed
6a64064
merge(images): refresh reviewed audit export
rsliter
committed
20e04a2
fix(security): reject build-context audit evidence
rsliter
committed
b9b31a0
test(images): detect changed audit receipt
rsliter
committed
a5a7bd5
merge: refresh PR 11156 onto main
rsliter
committed
f479884
fix(audit): retry refused registry connections
rsliter
committed
5d2782c
merge: refresh PR 11156 onto main
rsliter
committed
4a8ab51
refactor(audit): share mcporter evidence verification
rsliter
committed
451ca9b
test(images): retain base audit outputs
rsliter
committed
e433dfc
merge: refresh PR 11156 onto main
rsliter
committed
3cfbff6
test(audit): execute protected mcporter handoff
rsliter
committed
bdd9385
merge: refresh PR #11156 with main
rsliter
committed
fdb356e
test(audit): keep producer handoff coverage lean
rsliter
committed
e165162

Commits on Sep 9, 2026

merge: refresh PR #11156 with main
rsliter
committed
2512f82
merge: refresh PR #11156 with main
rsliter
committed
1871df2
fix(images): diagnose empty audit receipt hashes
rsliter
committed
b6dce0c
fix(e2e): run protected cache consumer from candidate
rsliter
committed
ef37a0a
fix(ci): isolate candidate image build from docker auth
rsliter
committed
f946900
test(audit): canonicalize handoff temp path
jyaunches
committed
4ba522b
fix(ci): preserve trusted protected controller
rsliter
committed
070c6a0
merge: preserve concurrent PR #11156 fix
rsliter
committed
8a8d335
merge: refresh PR #11156 with main
rsliter
committed
3f56655
fix(ci): trust protected npm audit handoff
rsliter
committed
07459b1
Merge remote-tracking branch 'origin/main' into refresh-pr11156
rsliter
committed
c3a9682
docs(audit): describe trusted protected producer
rsliter
committed
1fc8653
refactor(ci): inline audit evidence input
rsliter
committed
897354b
fix(ci): remove stale audit state
rsliter
committed
cb44beb
Merge branch 'main' into fix/npm-audit-incomplete-11088
cv
authored
e8531ca
Merge remote-tracking branch 'origin/main' into fix/npm-audit-incomplete-11088
jyaunches
committed
a0120b0
fix(ci): align protected audit workflow gates
jyaunches
committed
116d974
fix(ci): reuse audit evidence before protected builds
sandl99
committed
ab18eac
fix(ci): scope reviewed audit cache identity
jyaunches
committed
40c2554
merge: integrate latest PR repairs
jyaunches
committed
177f497
Merge remote-tracking branch 'origin/main' into fix/npm-audit-incomplete-11088
jyaunches
committed
c30ac05
test(ci): verify paired audit evidence handoff
jyaunches
committed
8ab0aa4
Merge remote-tracking branch 'origin/main' into fix/npm-audit-incomplete-11088
jyaunches
committed
a638f70
fix(ci): centralize protected audit authority
jyaunches
committed
663d7cf
merge: integrate latest main into audit fix
rsliter
committed
069cfa2
fix(ci): refresh plugin cache seed identity
rsliter
committed
1f9c0bb
fix(audit): retry empty transport responses
rsliter
committed
d92eff4
merge: resolve conflicts with main
github-actions[bot]
authored
284b0ce
test(security): isolate forged audit result
rsliter
authored
47708ed
merge: prepare trusted conflict resolution
rsliter
authored
fbc4312
Merge branch 'main' into fix/npm-audit-incomplete-11088
rsliter
authored
307ddd9
merge: restore reviewed protected audit resolution
rsliter
authored
65893ca
merge: prepare trusted conflict resolution

rsliter
authored and
jyaunches
committed
320d57d
merge: integrate current main

rsliter
authored and
jyaunches
committed
dbe9f0e
merge: restore reviewed protected audit resolution

rsliter
authored and
jyaunches
committed
7b3d841
test(security): align audit fixture with Node 22
rsliter
authored
1b2805e
fix(ci): complete reviewed audit follow-up

jyaunches
and
rsliter
committed
a6aead6
merge: integrate current main
jyaunches
committed
a8789d8
test(security): align audit fixture with Node 22

rsliter
authored and
jyaunches
committed
d0b70f7
fix(build): tolerate omitted audit hash args
jyaunches
committed
2a88fc3
Merge branch 'main' into fix/npm-audit-incomplete-11088
rsliter
authored
16af7c9
docs(audit): split handoff trust boundaries
jyaunches
committed
cf181d4
merge: integrate latest main
jyaunches
committed
98f93c4
merge: integrate current main
jyaunches
committed
3b1c655
merge: preserve protected PR history
jyaunches
committed
c8f51be
Merge branch 'main' into fix/npm-audit-incomplete-11088
rsliter
authored
4b3130d
Merge branch 'main' into fix/npm-audit-incomplete-11088
rsliter
authored
91f49ab

Commits on Sep 10, 2026

Merge branch 'main' into fix/npm-audit-incomplete-11088
rsliter
authored
d59be95
merge(ci): integrate trusted protected audit handoff
sandl99
committed
aa9075d
merge(ci): consume published base and isolate vLLM fixtures
sandl99
committed
73b67a6
merge: integrate published main for protected image evidence
sandl99
committed
71dd288
merge: refresh PR #11156 onto current main
rsliter
committed
a126c3f
merge: include latest main in PR #11156
rsliter
committed
0d8a071
Merge branch 'main' into fix/npm-audit-incomplete-11088
rsliter
authored
733c00a
Merge branch 'main' into fix/npm-audit-incomplete-11088
rsliter
authored
23a959a
Merge branch 'main' into fix/npm-audit-incomplete-11088
rsliter
authored
e0e1f71
Merge branch 'main' into fix/npm-audit-incomplete-11088
rsliter
authored
d364d1b
Merge branch 'main' into fix/npm-audit-incomplete-11088
rsliter
authored
0a17166
Merge branch 'main' into fix/npm-audit-incomplete-11088
rsliter
authored
736414d
merge: refresh PR #11156 onto main
rsliter
committed
7268da9
merge: include latest main in PR #11156
rsliter
committed
063bfea
merge: include current main in PR #11156
rsliter
committed
622b780
fix(ci): use current audit verifier flag
rsliter
committed
c0e5a73
merge: refresh PR #11156 onto current main
rsliter
committed
3747466
merge: include latest main in PR #11156
rsliter
committed
1441df8
fix(security): bind protected audit evidence
rsliter
committed
fb2c91e
fix(security): preserve shell-only audit verification
rsliter
committed
ffb23b1

Commits on Sep 11, 2026

fix(security): parse cached audit receipts strictly
rsliter
committed
ace89a7
style(test): apply audit handoff formatting
rsliter
committed
31645fc
fix(security): trim protected audit handoff
sandl99
committed
abbed15
Merge branch 'main' into fix/npm-audit-incomplete-11088
sandl99
authored
86ca177
merge: use published base for protected GPU qualification
sandl99
committed
1bd6e08
test: isolate vLLM profile selection from host probes
sandl99
committed
38fa1eb
test: retain bounded gateway diagnostics for activation failures
sandl99
committed
ca72fcb