Paul BakausandGitHub 36e4cea693 Pin workflow actions and document live-edit script trust (#755) ...

Pin existing action versions to verified commit SHAs, restrict CI to a read-only repository token, and document the optional live-edit validation script. Preserve required sync/sheriff permissions and existing runtime behavior. Related to #480; extension permission assessment remains separate.

AI assistance: Codex, under maintainer direction.

2026-09-06 18:04:55 -07:00

..

fixtures

Verify signed skill bundles before extraction (#734)

2026-09-04 18:21:01 -07:00

framework-fixtures

Release: CLI 4.0.2 and engine 0.1.1

2026-09-05 10:47:32 -07:00

lib

Add DeepSeek Harness as a supported skills provider (#746)

2026-09-06 14:46:05 -07:00

live-e2e

Release: CLI 4.0.2 and engine 0.1.1

2026-09-05 10:47:32 -07:00

new-work-e2e

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

oracle

Fix: distinguish existing Stop findings from new debt (#754)

2026-09-06 16:59:51 -07:00

skill-behavior

Fix: Setup survives a refused launcher (#750)

2026-09-06 13:07:29 -07:00

build.test.js

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

bundle-signing.test.mjs

Verify signed skill bundles before extraction (#734)

2026-09-04 18:21:01 -07:00

ci-test-plan.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

cli-shim.test.mjs

CLI: --version reports the npm package version (#731)

2026-09-04 13:52:32 -07:00

extension-build.test.mjs

extension: kinpaku UI for the popup, DevTools panel, sidebar and overlays (#729)

2026-09-04 13:00:13 -07:00

framework-fixtures.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

github-sheriff.test.mjs

Normalize sheriff exemption labels

2026-08-31 16:43:21 -07:00

hook-build.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

launcher-download.test.mjs

Fix: report removed launcher downloads accurately (#741)

2026-09-05 11:30:19 -07:00

live-browser-ignores.test.mjs

Fix: harden live overlay detector waivers (#639 follow-up)

2026-08-28 18:38:36 +05:00

live-browser-source.test.mjs

Release: CLI 4.0.2 and engine 0.1.1

2026-09-05 10:47:32 -07:00

live-e2e-accept-cleanup-regression.test.mjs

Fix live accept cleanup for mapped lists (#229)

2026-06-08 11:30:15 -07:00

live-e2e-agent-output.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-e2e-cli-options.test.mjs

Add DeepSeek live E2E adapter (#163)

2026-05-22 09:28:36 -07:00

live-e2e-llm-agent.test.mjs

Release: CLI 4.0.2 and engine 0.1.1

2026-09-05 10:47:32 -07:00

live-e2e-steer-agent.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

live-e2e.test.mjs

Release: CLI 4.0.2 and engine 0.1.1

2026-09-05 10:47:32 -07:00

live-reference.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

live-server-leak.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

live-svelte-adapter-deepseek.test.mjs

Release: CLI 4.0.2 and engine 0.1.1

2026-09-05 10:47:32 -07:00

new-work-e2e.test.mjs

Fix: use system fonts and the light theme in the picker (#751)

2026-09-06 12:44:15 -07:00

openai-plugin.test.mjs

Split service layer into private impeccable-site repo

2026-07-20 22:41:53 -07:00

oracle.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

plugin-e2e.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

plugin-paths.test.js

Fix: Setup survives a refused launcher (#750)

2026-09-06 13:07:29 -07:00

process-group.test.mjs

Tests: stop the harness leaking live-server processes (#718)

2026-09-03 19:21:30 -07:00

publish-platform-packages.test.mjs

The Rust engine: one binary replaces every script and the JS detector, fully open (#714)

2026-09-04 10:42:45 -07:00

readme-gitignore.test.mjs

Fix: ignore review and questions dirs in README gitignore (#677)

2026-08-31 18:20:58 -04:00

release-engine-workflow.test.js

Sign Windows engine releases with Azure Artifact Signing (#742)

2026-09-05 15:38:55 -07:00

release.test.mjs

Verify signed skill bundles before extraction (#734)

2026-09-04 18:21:01 -07:00

root-commands-sync.test.js

Fix OpenCode slash command bridge (#483)

2026-09-01 19:05:37 -04:00

skill-behavior-harness.test.mjs

Fix: Setup survives a refused launcher (#750)

2026-09-06 13:07:29 -07:00

skill-reference.test.mjs

Fix: critique snapshot close path (#660)

2026-08-31 22:42:44 -04:00

test-suites.test.mjs

Harden the test strategy: self-verifying triggers, 40% faster runner, release guards (#501)

2026-08-03 17:33:10 -07:00

validate-plugin-manifest.test.js

Guard the plugin loader contract that PR #494 exposed (#499)

2026-08-03 13:13:37 -07:00

validate-plugin-versions.test.js

Fix Codex skill version metadata (#703)

2026-09-01 20:21:01 -04:00

workflow-security.test.js

Pin workflow actions and document live-edit script trust (#755)

2026-09-06 18:04:55 -07:00