pulse-triage[bot]
95a7191ca9
Enforce native private state permissions
2026-08-30 03:31:00 +01:00
rcourtman
47f2bdaed4
Add Go branch-coverage tests for pure config and helper packages
...
Build and Test / Secret Scan (push) Waiting to run
Build and Test / Frontend & Backend (push) Waiting to run
Canonical Governance / governance (push) Waiting to run
Patrol Qualification Regression / Catalog, scorer, and replay regression (push) Waiting to run
Core E2E Tests / Playwright Core E2E (shard 1/4) (push) Waiting to run
Unified Agent Native Verification / macOS Intel (push) Waiting to run
Core E2E Tests / Playwright Core E2E (shard 2/4) (push) Waiting to run
Core E2E Tests / Playwright Core E2E (shard 3/4) (push) Waiting to run
Core E2E Tests / Playwright Core E2E (shard 4/4) (push) Waiting to run
Core E2E Tests / E2E verdict (push) Blocked by required conditions
Unified Agent Native Verification / Linux ARM64 (push) Waiting to run
Unified Agent Native Verification / Linux x64 (push) Waiting to run
Unified Agent Native Verification / Windows x64 (push) Waiting to run
Unified Agent Native Verification / macOS ARM64 (push) Waiting to run
Unified Agent Native Verification / FreeBSD cross-build contract (push) Waiting to run
Adds table-driven branch-coverage unit tests for previously untested pure
helper functions across internal/alerts/config, internal/config,
internal/ai/safety, internal/ai/modelresolution, internal/operationreceipt,
internal/models, internal/securityutil and pkg/securityutil. New test files
only, with no source changes.
Covers alert-config normalization and validation, sensitive-path and
redaction classifiers, URL normalizers, provider model resolution,
operation-receipt decoding, credential masking, and account-to-org role
mapping. 57 TestBranchCov functions in 12 files, all vet and gofmt clean.
2026-07-16 10:19:51 +01:00
rcourtman
042e7ef966
Harden remaining CodeQL security boundaries
2026-07-09 19:46:40 +01:00
rcourtman
e7334e66e4
Allow local DNS agent HTTP URLs
...
Refs #1522
2026-07-06 13:53:19 +01:00
rcourtman
314429b879
Fix v5 agent update recovery
...
Issue: #1515
2026-07-05 10:08:19 +01:00
rcourtman
6344d17fd1
Allow local Pulse HTTP agent URLs
...
Refs #1505
2026-07-03 00:24:40 +01:00
rcourtman
faefe6edc8
Remove 198 unreachable Go functions
...
Dead-code sweep. Functions flagged unreachable by golang.org/x/tools/cmd/deadcode
and confirmed unused across pulse, pulse-enterprise, pulse-pro and pulse-mobile by
adversarial cross-repo verification. Cross-module reachability was checked
explicitly (only pkg/ exported symbols are importable by other modules; internal/
packages and _test.go files are not). go build, go vet and test-compile all pass.
2026-06-03 12:29:37 +01:00
rcourtman
eb98c13896
Allow insecure dev HTTP agent runtime URLs
2026-04-23 13:48:54 +01:00
rcourtman
8a42bb432e
Harden commercial callback and transport URL policy
2026-04-22 10:57:21 +01:00
rcourtman
9c8387be6f
Export restricted outbound HTTP security helpers
2026-04-22 10:05:57 +01:00
rcourtman
70b91759d2
Harden secure local key file handling
2026-04-22 05:13:01 +01:00
rcourtman
ccb2edc3b8
Require explicit websocket origin continuity
2026-04-22 04:46:13 +01:00
rcourtman
d64f5b2917
Canonicalize loopback-only Pulse transport validation
2026-04-22 04:11:18 +01:00
rcourtman
43922161e4
Harden connection probe and simple stats rendering
2026-04-22 01:18:33 +01:00
rcourtman
513399b004
Harden hosted signup and audit webhook trust paths
2026-04-22 00:54:49 +01:00
rcourtman
f2746960d6
Relax mounted storage-root hardening semantics
2026-04-16 21:37:11 +01:00
rcourtman
9855973e5b
Fix non-root storage hardening for Helm startup
2026-04-16 21:26:02 +01:00
rcourtman
4564742c18
Harden outbound SSO fetch boundaries
2026-04-01 16:36:44 +01:00
rcourtman
f1fc17e627
Canonicalize fixed alerts and licensing paths
2026-03-29 14:14:36 +01:00
rcourtman
82b24f5d90
Harden AI storage leaf path handling
2026-03-29 13:35:32 +01:00
rcourtman
d6536932fc
Harden outbound URLs and file-backed storage
2026-03-29 12:47:55 +01:00
