fix(hermes): trust corporate CA in final-stage downloads - #8228

Merged

cv merged 37 commits into

mainfrom

codex/hermes-final-stage-ca-ordering

Aug 5, 2026

Commits on Aug 4, 2026

fix(security): trust corporate CA before Hermes final-stage fetches
cv
committed
bbf46c1
test(hermes): accept guarded npm remediation runs
cv
committed
3c0df7b
merge: refresh main for hermes CA ordering
cv
committed
7e40308
test(security): validate Dockerfile remediation runs
cv
committed
75c9e34
Merge remote-tracking branch 'origin/main' into codex/hermes-final-stage-ca-ordering
cv
committed
270af86
fix(security): scope Hermes build CA trust
cv
committed
48b8cd9
Merge remote-tracking branch 'origin/main' into codex/hermes-final-stage-ca-ordering
cv
committed
9dcaf72
fix(security): preserve Hermes package trust defaults
cv
committed
f44498c
Merge remote-tracking branch 'origin/main' into codex/hermes-final-stage-ca-ordering
cv
committed
0c6994c
fix(security): reject hidden Dockerfile commands
cv
committed
d398aca
fix(security): scan Dockerfile continuations safely
cv
committed
3c776ce
test(hermes): exercise corporate CA image build
jyaunches
committed
4c9e97c
test(hermes): verify default CA trust in image
jyaunches
committed
ff64217
test(hermes): bound corporate CA image fixture
jyaunches
committed
fe93fdd
test(hermes): keep CA fixture test linear
jyaunches
committed
591aaac
fix(ci): select cross-signed CA trust path
jyaunches
committed
6b96ddb
fix(ci): eliminate CA fixture output race
jyaunches
committed
bad4683
merge(main): refresh PR branch
cv
committed
0c4fbd7
fix(ci): validate CA fixture file and build order
cv
committed
47c2ff1
merge(main): refresh PR branch
cv
committed
d00db4a
fix(ci): document CA output file identity check
cv
committed
91cbdf8
fix(security): validate opened CA output before writes
cv
committed
6ef59fd
test(security): cover device CA outputs
cv
committed
8bcb8f8
merge(main): refresh PR branch
cv
committed
abb8668
merge(main): refresh Hermes certificate ordering
cv
committed
a98b808

Commits on Aug 5, 2026

merge(main): refresh Hermes certificate ordering
cv
committed
2450e13
Merge branch 'main' into codex/hermes-final-stage-ca-ordering
cv
authored
ab2e28c
merge(main): refresh Hermes CA fix
prekshivyas
committed
7064312
ci(gates): refresh pull request gate state
prekshivyas
committed
e2d6b04
ci(gates): bind exact review receipts
prekshivyas
committed
33b741c
merge(main): refresh Hermes CA fix
prekshivyas
committed
a16c78f
merge(main): refresh Hermes corporate CA fix
prekshivyas
committed
2b11b16
merge(main): integrate current main
cv
committed
656951d
merge(main): integrate current main
cv
committed
58910e3
merge(main): integrate current main
cv
committed
fce1cba
merge(main): integrate current main
cv
committed
2fc6a3e
merge(main): refresh PR 8228
cv
committed
24dd82d