Merge/exec arg wildcards#38

Merged

entlein merged 26 commits intomainfrom

merge/exec-arg-wildcards

May 10, 2026

Commits on May 4, 2026

test(component): port Test_28 to upstream's unified user-overlay label
Entlein
committed
feat(cel): re-port CompareExecArgs hookup onto upstream's CP cache
Entlein
committed
feat(rules): R0040 'Unexpected process arguments' + Test_32 e2e
Entlein
committed
deps(storage): bump to rebased feat/exec-arg-wildcards tip (0de34ebc)
Entlein
committed
ci(component-tests): add Test_32_UnexpectedProcessArguments to matrix
Entlein
committed
fix(containerprofilecache): re-wire R1016 tamper alert + expand Test_31
Entlein
committed
test(component): Test_32 profile uses full-path argv[0]
Entlein
committed
test: AP-fixture linter (R-AP-* rules) + canonical reference profile
Entlein
committed
fix(tamper_alert): accept self-signed profiles, only flag actual tamper
Entlein
committed
test(component): make Test_30 30b deterministic by re-execing inside Eventually
Entlein
committed
deps(storage): bump replace to f44fed80 (analyzer trailing-* fix)
Entlein
committed
deps(storage): bump replace to 4ab95fb8 (PR #25 merged on fork main)
Entlein
committed
test(component): Test_33_AnalyzeOpensWildcardAnchoring
Entlein
committed
test(component): rework Test_33 negative cases to probe under R0002's monitored prefix
Entlein
committed
test(component): fix Test_28 + Test_31 31b flakiness
Entlein
committed
test(component): sign-after-roundtrip in Test_31 to defeat content-drift R1016 false positive
Entlein
committed
test(component): bump Test_33 WaitForReady to 180s for cluster-pressure tolerance
Entlein
committed
deps(storage): bump replace to 43795bb4 (storage feat/exec-arg-wildcards tip — CRDs + CompareExecArgs)
Entlein
committed
test(aplint): drop redundant p := p loop var (Go 1.22+, copyloopvar lint)
Entlein
committed
fix(tamper_alert): R1016 dedup + use real WLID
Entlein
committed
deps(storage): bump replace to b0d68d3d (empty-Args wildcard match)
Entlein
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Merge/exec arg wildcards#38

Merge/exec arg wildcards#38
entlein merged 26 commits intomainfrom
merge/exec-arg-wildcards

Commits on May 4, 2026

test(component): port Test_28 to upstream's unified user-overlay label

feat(cel): re-port CompareExecArgs hookup onto upstream's CP cache

feat(rules): R0040 'Unexpected process arguments' + Test_32 e2e

deps(storage): bump to rebased feat/exec-arg-wildcards tip (0de34ebc)

ci(component-tests): add Test_32_UnexpectedProcessArguments to matrix

fix(containerprofilecache): re-wire R1016 tamper alert + expand Test_31

test(component): Test_32 profile uses full-path argv[0]

test: AP-fixture linter (R-AP-* rules) + canonical reference profile

fix(tamper_alert): accept self-signed profiles, only flag actual tamper

test(component): make Test_30 30b deterministic by re-execing inside Eventually

deps(storage): bump replace to f44fed80 (analyzer trailing-* fix)

deps(storage): bump replace to 4ab95fb8 (PR #25 merged on fork main)

test(component): Test_33_AnalyzeOpensWildcardAnchoring

test(component): rework Test_33 negative cases to probe under R0002's monitored prefix

test(component): fix Test_28 + Test_31 31b flakiness

test(component): sign-after-roundtrip in Test_31 to defeat content-drift R1016 false positive

test(component): bump Test_33 WaitForReady to 180s for cluster-pressure tolerance

deps(storage): bump replace to 43795bb4 (storage feat/exec-arg-wildcards tip — CRDs + CompareExecArgs)

test(aplint): drop redundant p := p loop var (Go 1.22+, copyloopvar lint)

fix(tamper_alert): R1016 dedup + use real WLID

deps(storage): bump replace to b0d68d3d (empty-Args wildcard match)

Commits on May 9, 2026

fix: address CodeRabbit second-review batch on PR #38

fix: address CodeRabbit third-review batch on PR #38 (0cf4a503)

Merge remote-tracking branch 'origin/main' into merge/exec-arg-wildcards

fix(test): make dedup-clearing assertion non-trivial

fix(ci): drop 'permissions: read-all' from reusable workflows