feat(ci): adopt cluster-template pre-commit hooks, scope CI tokens - #4381

Closed

Tanguille wants to merge 19 commits into

fix/security-audit-runner-splitfrom

feat/ci-lefthook-hooks

Commits on Aug 6, 2026

refactor(external-service): collapse ten per-app trees into two ResourceSets
Tanguille
committed
a378bb4
refactor(dns): move ndots:1 into a shared component
Tanguille
committed
c435d29
refactor(kube-state-metrics): drop unread Flux kinds and anchor the rest
Tanguille
committed
c6f4e9c
perf(monero-dashboard): stream proxy responses and drop duplicate fetches
Tanguille
committed
efe83ea
ci(flate): cache talosctl on a shared runner volume
Tanguille
committed
7e6d089
chore(helm): drop values that restate chart defaults
Tanguille
committed
7d21361
refactor(flux): consolidate controller patches, use native merge semantics
Tanguille
committed
ac1ad1e
chore: drop restated API defaults, dead code and stale comments
Tanguille
committed
059f928
fix(flate): treat the talosctl cache as optional
Tanguille
committed
93fe744
fix(review): address DeepSource and CodeRabbit findings
Tanguille
committed
e884901
fix(flate): verify the talosctl copy, not the shared cache entry
Tanguille
committed
1abf1ad
docs: trim the comments added by this pass to one-line facts
Tanguille
committed
efb61b3
fix(flate): ignore readdir races when pruning the shared cache
Tanguille
committed
43a74a4
feat(security): isolate agent PR review from Talos credentials, enforce PSA baseline
Tanguille
committed
1bd24d6
fix(ci): keep agent-pr-review on cluster-runner until review-runner exists
Tanguille
committed
29f1b7e
fix(ci): defer cluster-runner scale-down to the workflow switch
Tanguille
committed
3419786
refactor(ci): trim review-runner and pin opencode plugins via renovate
Tanguille
committed
1be1501
feat(security): move agent-pr-review to review-runner, enforce PSA by default
Tanguille
committed
a656987
feat(ci): adopt cluster-template pre-commit hooks, scope CI tokens
Tanguille
committed
e8b5832

Navigation Menu

feat(ci): adopt cluster-template pre-commit hooks, scope CI tokens - #4381

feat(ci): adopt cluster-template pre-commit hooks, scope CI tokens#4381
Tanguille wants to merge 19 commits into
fix/security-audit-runner-splitfrom
feat/ci-lefthook-hooks

Commits on Aug 6, 2026

refactor(external-service): collapse ten per-app trees into two ResourceSets

refactor(dns): move ndots:1 into a shared component

refactor(kube-state-metrics): drop unread Flux kinds and anchor the rest

perf(monero-dashboard): stream proxy responses and drop duplicate fetches

ci(flate): cache talosctl on a shared runner volume

chore(helm): drop values that restate chart defaults

refactor(flux): consolidate controller patches, use native merge semantics

chore: drop restated API defaults, dead code and stale comments

fix(flate): treat the talosctl cache as optional

fix(review): address DeepSource and CodeRabbit findings

fix(flate): verify the talosctl copy, not the shared cache entry

docs: trim the comments added by this pass to one-line facts

fix(flate): ignore readdir races when pruning the shared cache

feat(security): isolate agent PR review from Talos credentials, enforce PSA baseline

fix(ci): keep agent-pr-review on cluster-runner until review-runner exists

fix(ci): defer cluster-runner scale-down to the workflow switch

refactor(ci): trim review-runner and pin opencode plugins via renovate

feat(security): move agent-pr-review to review-runner, enforce PSA by default

feat(ci): adopt cluster-template pre-commit hooks, scope CI tokens