Commit Graph

24 Commits

Author SHA1 Message Date
bd715a8473 fix(assessment): reject ambiguous trust keyrings
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 17:17:34 +02:00
ad8dd4f319 fix(assessment): establish independent release trust
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 17:09:35 +02:00
753dd2a3ee fix(release): fail closed on dashboard parse errors 2026-07-22 17:07:30 +02:00
b6bef410d6 fix(release): fail closed on malformed WebUI metadata 2026-07-22 16:55:06 +02:00
72f697c341 fix(release): harden review gate diagnostics 2026-07-22 16:52:27 +02:00
36f662c56f test(release): isolate manifest gate remote 2026-07-22 16:34:39 +02:00
25fbbaf5ad feat(assessment): gate signed release drift 2026-07-22 16:31:28 +02:00
bcab7095c3 feat(release): guide selective gate remediation 2026-07-22 16:28:13 +02:00
5447299289 Block mismatched selective WebUI releases
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 10:37:19 +02:00
8ecf8770ab feat(release): synthesize initial catalog entries
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 12s
2026-07-22 04:56:36 +02:00
8906704dc0 feat(release): gate tags on scoped workflows
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 12s
2026-07-22 01:56:18 +02:00
30f9ed152a feat(release): publish verified source tags
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 12s
2026-07-22 01:17:07 +02:00
eca75cbc93 fix(dev): resolve stale editable packages together 2026-07-22 00:58:16 +02:00
99e255cf81 fix(release): separate artifact and source contracts
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-21 13:24:37 +02:00
d9819c4aad test(release): validate installed module artifacts 2026-07-21 13:24:02 +02:00
78b601a2e5 fix(release): reject unpackageable tagged artifacts 2026-07-21 12:58:15 +02:00
a18c7ea040 fix(release): validate independent module versions 2026-07-21 12:51:25 +02:00
b193d4555f fix(audit): accept empty OSV source reports 2026-07-21 12:51:19 +02:00
676030b993 Harden security audit result contracts 2026-07-21 12:29:53 +02:00
a15a74c54c feat(release): enforce aligned trusted publications 2026-07-21 12:25:06 +02:00
c34892f6ea feat(release): generate reproducible CycloneDX SBOM 2026-07-21 12:24:49 +02:00
17f8036bdc Harden release console token bootstrap
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 13s
2026-07-21 03:16:57 +02:00
9805d085fa test(release): keep release tooling coverage with its owner 2026-07-20 20:01:19 +02:00
2e21397868 chore(checks): discover workspace module boundaries 2026-07-20 20:01:14 +02:00