New pull request
Require signed artifact scope claims
All checks were successful
test / e2e (pull_request) Successful in 5s
test / unit (pull_request) Successful in 6s
ci / test (pull_request) Successful in 6s
#18 by stephen was closed 2026-07-05 20:57:07 +00:00
Reject cross-repo artifact scopes
All checks were successful
ci / test (pull_request) Successful in 7s
test / unit (pull_request) Successful in 5s
test / e2e (pull_request) Successful in 5s
#16 by stephen was closed 2026-07-05 21:01:01 +00:00
Vendored SigV4 known-answer drift guard (#11)
All checks were successful
test / unit (pull_request) Successful in 5s
ci / test (pull_request) Successful in 6s
test / e2e (pull_request) Successful in 4s
#14 by stephen was merged 2026-07-02 04:24:30 +00:00
ci: gate PRs with the test suite
All checks were successful
test / unit (pull_request) Successful in 5s
ci / test (pull_request) Successful in 6s
test / e2e (pull_request) Successful in 5s
#13 by stephen was merged 2026-06-30 21:18:01 +00:00
Clarify sidecar fail-closed: replace dead sidecar-less fallback with a clear error
All checks were successful
test / unit (pull_request) Successful in 23s
test / e2e (pull_request) Successful in 4s
#12 by stephen was merged 2026-06-24 19:21:11 +00:00
Harden artifact integrity checks
All checks were successful
test / unit (pull_request) Successful in 25s
test / e2e (pull_request) Successful in 24s
#9 by stephen was merged 2026-06-22 20:20:50 +00:00
Bound compressed artifact temp writes
All checks were successful
test / unit (pull_request) Successful in 22s
test / e2e (pull_request) Successful in 22s
#8 by stephen was merged 2026-06-20 19:55:08 +00:00
Harden artifact extraction symlink checks
All checks were successful
test / unit (pull_request) Successful in 23s
test / e2e (pull_request) Successful in 23s
#7 by stephen was merged 2026-06-18 17:47:58 +00:00
Cap extraction size/count and strip setuid bits (#2)
All checks were successful
test / unit (pull_request) Successful in 5s
test / e2e (pull_request) Successful in 4s
#5 by stephen was merged 2026-06-17 18:26:57 +00:00 3 / 4
Verify artifact sha256 digest before extraction (#1)
All checks were successful
test / unit (pull_request) Successful in 5s
test / e2e (pull_request) Successful in 4s
#4 by stephen was merged 2026-06-16 23:45:34 +00:00 3 / 3
Validate tar entries before extraction (#2)
All checks were successful
test / unit (pull_request) Successful in 24s
test / e2e (pull_request) Successful in 4s
#3 by stephen was merged 2026-06-16 23:35:05 +00:00 3 / 3