vrr/Pulse
2
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-10-16 15:20:48 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 11

Fail closed when installing MCP binaries
Some checks failed
Build and Test / Secret Scan (push) Waiting to run
Details
Build and Test / Detect changed areas (push) Waiting to run
Details
Build and Test / Frontend (push) Blocked by required conditions
Details
Build and Test / Backend tests (api) (push) Blocked by required conditions
Details
Build and Test / Backend tests (rest-0) (push) Blocked by required conditions
Details
Build and Test / Backend tests (rest-1) (push) Blocked by required conditions
Details
Build and Test / Script smoke tests & backend build (push) Blocked by required conditions
Details
Build and Test / Benchmarks (push) Blocked by required conditions
Details
Canonical Governance / governance (push) Waiting to run
Details
Helm CI / Lint and Render Chart (push) Waiting to run
Details
Public docs / check (push) Waiting to run
Details
Core E2E Tests / Validate E2E tier selection (push) Waiting to run
Details
Core E2E Tests / Playwright Core E2E (shard 1/8) (push) Blocked by required conditions
Details
Core E2E Tests / Playwright Core E2E (shard 2/8) (push) Blocked by required conditions
Details
Core E2E Tests / Playwright Core E2E (shard 3/8) (push) Blocked by required conditions
Details
Core E2E Tests / Playwright Core E2E (shard 4/8) (push) Blocked by required conditions
Details
Core E2E Tests / Playwright Core E2E (shard 5/8) (push) Blocked by required conditions
Details
Core E2E Tests / Playwright Core E2E (shard 6/8) (push) Blocked by required conditions
Details
Core E2E Tests / Playwright Core E2E (shard 7/8) (push) Blocked by required conditions
Details
Core E2E Tests / Playwright Core E2E (shard 8/8) (push) Blocked by required conditions
Details
Core E2E Tests / Agent registration lifecycle (push) Waiting to run
Details
Core E2E Tests / E2E verdict (push) Blocked by required conditions
Details
Unified Agent Native Verification / Linux ARM64 (push) Waiting to run
Details
Unified Agent Native Verification / Linux x64 (push) Waiting to run
Details
Unified Agent Native Verification / Windows x64 (push) Waiting to run
Details
Unified Agent Native Verification / macOS ARM64 (push) Waiting to run
Details
Unified Agent Native Verification / macOS Intel (push) Waiting to run
Details
Unified Agent Native Verification / FreeBSD cross-build contract (push) Waiting to run
Details
Patrol Qualification Regression / Catalog, scorer, and replay regression (push) Has been cancelled
Details

Browse source 
Verify the signed release checksum manifest against Pulse's pinned SSH key before either MCP installer accepts a downloaded binary. Remove the unsigned bypass and require one exact digest entry.

Include bare Unix MCP executables in release checksum/signature assembly, cover unavailable, invalid, ambiguous, mismatched, and successful evidence paths with executable regression tests, and enforce MCP installer pins against the configured release key.
This commit is contained in:
pulse-triage[bot] 2026-08-30 05:06:49 +01:00
parent d8986c139a
commit e66f6a26f7
10 changed files with 426 additions and 70 deletions
Download patch file Download diff file Expand all files Collapse all files

9
scripts/release_asset_common.sh
View file

@ -257,6 +257,15 @@ pulse_release_collect_checksum_files() {
if compgen -G "pulse-agent-freebsd-*" > /dev/null; then
checksum_files+=( pulse-agent-freebsd-* )
fi
if compgen -G "pulse-mcp-linux-*" > /dev/null; then
checksum_files+=( pulse-mcp-linux-* )
fi
if compgen -G "pulse-mcp-darwin-*" > /dev/null; then
checksum_files+=( pulse-mcp-darwin-* )
fi
if compgen -G "pulse-mcp-freebsd-*" > /dev/null; then
checksum_files+=( pulse-mcp-freebsd-* )
fi
if compgen -G "pulse-*.exe" > /dev/null; then
checksum_files+=( pulse-*.exe )
fi