Dallin Romney
208c6ce4fa
fix(ci): reuse Security Review notice inventories ( #172516 )
2026-10-14 14:17:07 -07:00
Josh Avant
50d7eb1b7f
fix: recover transient security review notice failures ( #163357 )
2026-10-08 17:11:27 -07:00
Josh Avant
e6f2610a1c
fix(ci): make informational security notices easier to spot ( #164056 )
...
* fix(ci): make informational security notices easier to spot
* fix(ci): keep informational notices at body text size
* fix(ci): lead with the security approval outcome
2026-10-03 01:04:31 -05:00
Josh Avant
35263bd17a
fix(ci): stop obsolete security reviews after PR lifecycle changes ( #160890 )
...
* fix(ci): stop obsolete security reviews after PR lifecycle changes
* fix(ci): preserve security review evidence after merges
2026-09-28 21:34:29 -05:00
Peter Steinberger
824982caa6
fix(ci): preserve security authority in baseline failure admission
2026-09-27 21:45:21 -07:00
Josh Avant
6615891cc3
fix(ci): skip superseded security review runs ( #155170 )
2026-09-21 15:52:39 -05:00
Josh Avant
d70d5c1248
fix(ci): reduce Security Review fetches and handle rate limits ( #155054 )
...
* fix(ci): narrow security review checkout
* fix(ci): retry rate-limited security reviews
2026-09-21 13:34:34 -05:00
Josh Avant
fda6fb3016
fix(ci): avoid stale Security Review failures after reevaluation ( #153089 )
2026-09-19 13:31:50 -05:00
Josh Avant
2a06fe7235
fix: clarify maintainer security warning introductions ( #152634 )
2026-09-19 01:44:43 -05:00
Josh Avant
5a2bc22ce9
fix(ci): clarify security review comments ( #152578 )
...
* fix(ci): clarify security review warning comments
* fix(ci): simplify security approval comments
* fix(ci): remove hyphen from maintainer security warning
* fix(ci): list dependency changes in maintainer warnings
* fix(ci): simplify dependency graph filename lists
2026-09-19 01:27:07 -05:00
Josh Avant
c2b84506a9
feat(ci): split security review into maintainer and SecOps tiers ( #152415 )
...
* feat(ci): split security review into two tiers
* refactor(ci): move security review paths into YAML
* fix(ci): require explicit maintainer approval commands
* feat(ci): integrate automatic security review with CI
* fix(ci): filter security review comment events
* test(ci): include security review workflow routes
2026-09-18 23:39:46 -05:00
Peter Steinberger
b822e6e425
refactor(github): consolidate guard display sanitization ( #123620 )
2026-08-14 13:29:21 -07:00
Peter Steinberger
c23d66e3b5
refactor: consolidate coercion ownership ( #122692 )
...
* refactor: consolidate coercion ownership
* test: align shard check with weighted planning
* chore: refresh plugin SDK API baseline
2026-08-12 09:25:28 -07:00
Peter Steinberger
c70aee247e
refactor(scripts): migrate JavaScript tools to TypeScript ( #121005 )
...
* refactor(scripts): migrate JavaScript tools to TypeScript
* fix(ci): keep changed-scope preflight zero-install
* fix(ci): preserve zero-install script owners
* fix(ci): complete script migration follow-through
* fix(release): keep stable closeout zero-install
* fix(scripts): preserve standalone execution boundaries
* fix(scripts): repair standalone loader boundaries
* fix(scripts): normalize gateway observation ids
* fix(scripts): keep Docker packager standalone
* test(scripts): preserve rebase cleanup helpers
* test(sessions): use tracked temp directory
2026-08-09 07:21:35 -07:00
Vincent Koc
ba7af36306
refactor(deadcode): localize script constants ( #101892 )
2026-07-07 15:17:41 -07:00
Vincent Koc
ba43be9424
refactor(github): share guard comment helpers
2026-06-20 06:10:37 +08:00
Vincent Koc
aa479ac7d8
refactor(github): share guard request helpers
2026-06-20 06:07:12 +08:00
Vincent Koc
36bfe77db1
fix(github): bound guard response bodies
2026-06-19 05:47:19 +02:00
joshavant
5d9c010628
ci: add security-sensitive file guard
2026-06-17 12:50:18 +02:00
