Commit Graph

28 Commits

Author SHA1 Message Date
5381e37a9e Execute receipt-bound durable release runs 2026-07-22 21:37:18 +02:00
7ecf1f17b0 Harden release source execution 2026-07-22 21:37:14 +02:00
349a099e5a Harden catalog publication transaction 2026-07-22 21:20:08 +02:00
fdee766993 Authenticate selective catalog base pairs 2026-07-22 20:59:00 +02:00
9c0650b2ed Bind installed releases to signed artifact receipts 2026-07-22 20:42:05 +02:00
4dc0c8d013 Harden release artifact publication 2026-07-22 20:41:42 +02:00
35c346a1fa Add private release candidate handles 2026-07-22 20:41:36 +02:00
4edbc11fe5 feat(release): bound durable run retention 2026-07-22 20:16:19 +02:00
4c16069f88 fix(release): preserve durable recovery capacity 2026-07-22 19:48:55 +02:00
22f5c2ff4e fix(release): make durable runs recovery safe 2026-07-22 19:30:12 +02:00
1dc9148ec3 fix(release): harden durable run recovery 2026-07-22 18:58:54 +02:00
d0dc916837 feat(release): persist resumable run state 2026-07-22 18:32:19 +02:00
ad8dd4f319 fix(assessment): establish independent release trust
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 17:09:35 +02:00
753dd2a3ee fix(release): fail closed on dashboard parse errors 2026-07-22 17:07:30 +02:00
b6bef410d6 fix(release): fail closed on malformed WebUI metadata 2026-07-22 16:55:06 +02:00
72f697c341 fix(release): harden review gate diagnostics 2026-07-22 16:52:27 +02:00
bcab7095c3 feat(release): guide selective gate remediation 2026-07-22 16:28:13 +02:00
5447299289 Block mismatched selective WebUI releases
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 10:37:19 +02:00
8ecf8770ab feat(release): synthesize initial catalog entries
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 12s
2026-07-22 04:56:36 +02:00
8906704dc0 feat(release): gate tags on scoped workflows
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 12s
2026-07-22 01:56:18 +02:00
30f9ed152a feat(release): publish verified source tags
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 12s
2026-07-22 01:17:07 +02:00
78b601a2e5 fix(release): reject unpackageable tagged artifacts 2026-07-21 12:58:15 +02:00
a15a74c54c feat(release): enforce aligned trusted publications 2026-07-21 12:25:06 +02:00
c34892f6ea feat(release): generate reproducible CycloneDX SBOM 2026-07-21 12:24:49 +02:00
17f8036bdc Harden release console token bootstrap
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 13s
2026-07-21 03:16:57 +02:00
05ae81d641 intermediate commit
Some checks failed
Security Audit / security-audit (push) Failing after 11s
Security Audit Toolbox Update / toolbox-update (push) Failing after 4s
Dependency Audit / dependency-audit (push) Failing after 17s
2026-07-14 13:32:09 +02:00
342582645b Harden audit tooling and release helpers
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 1m14s
Security Audit / security-audit (push) Failing after 31s
2026-07-11 18:49:36 +02:00
70109afc78 Initialize GovOPlaN meta repository 2026-07-11 17:16:58 +02:00