Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
21 commits
Select commit Hold shift + click to select a range
9740272
Add allowlisted runtime repository checkout lists
pelikhan Oct 13, 2026
9b483bb
Enforce runtime checkout allowlists and report rejected repositories
pelikhan Oct 13, 2026
382cb07
Report all runtime checkout preparation failures
pelikhan Oct 13, 2026
847b9a9
Block LFS endpoints from bypassing runtime checkout allowlists
pelikhan Oct 13, 2026
292b7de
Verify dynamic checkout credentials and exempt workflow repository ex…
pelikhan Oct 14, 2026
973fc26
Merge origin/main and preserve runtime checkout failure reporting
pelikhan Oct 14, 2026
cb1d3d5
Merge remote-tracking branch 'origin/main' into pelikhan-checkout-syntax
Copilot Oct 14, 2026
bafe428
Block submodule allowlist bypass for all runtime checkout lists
Copilot Oct 14, 2026
9366956
docs(adr): add draft ADR-68593 for allowlisted runtime repository che…
github-actions[bot] Oct 14, 2026
4741e30
Limit runtime repository checkout lists with max-repos
Copilot Oct 14, 2026
010d030
Address runtime checkout review feedback
pelikhan Oct 14, 2026
7ce3df7
Merge remote-tracking branch 'origin/main' into pelikhan-checkout-syntax
Copilot Oct 14, 2026
dfac0a4
Specify runtime checkout safe-output and formal contracts
pelikhan Oct 14, 2026
feafdd6
Require explicit private runtime checkout opt-in
pelikhan Oct 14, 2026
e6ef50f
Merge main after grouped checkout review
pelikhan Oct 14, 2026
ce773fa
Merge main into runtime checkout branch
pelikhan Oct 14, 2026
99f460f
Merge latest main and pin available Prettier
pelikhan Oct 14, 2026
d4c0803
Merge main after grouped checkout feedback verification
pelikhan Oct 14, 2026
87f14e9
Update workflows and preserve setup-node v7.1.0
pelikhan Oct 14, 2026
31e6560
Pin Vite to the 1ES-available 8.3.1 release
pelikhan Oct 14, 2026
0bbfff5
Pin Node types to the 1ES-available 26.6.3 release
pelikhan Oct 14, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions .changeset/major-runtime-repository-checkout.md

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

29 changes: 2 additions & 27 deletions .github/aw/actions-lock.json
Original file line number Diff line number Diff line change
Expand Up @@ -43,21 +43,11 @@
"version": "v7.0.1",
"sha": "3d3c42e5aac5ba805825da76410c181273ba90b1"
},
"actions/create-github-app-token@v3.2.0": {
"repo": "actions/create-github-app-token",
"version": "v3.2.0",
"sha": "bcd2ba49218906704ab6c1aa796996da409d3eb1"
},
"actions/create-github-app-token@v3.3.0": {
"repo": "actions/create-github-app-token",
"version": "v3.3.0",
"sha": "64ab729a6294000f5aa4a4bc0b73d1f32bc45510"
},
"actions/download-artifact@v8.0.1": {
"repo": "actions/download-artifact",
"version": "v8.0.1",
"sha": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c"
},
"actions/download-artifact@v8.0.2": {
"repo": "actions/download-artifact",
"version": "v8.0.2",
Expand Down Expand Up @@ -93,11 +83,6 @@
"version": "v6.0.1",
"sha": "de7274f081f381c8f8158605e0321c36c376e2e6"
},
"actions/setup-node@v7.0.0": {
"repo": "actions/setup-node",
"version": "v7.0.0",
"sha": "820762786026740c76f36085b0efc47a31fe5020"
},
"actions/setup-node@v7.1.0": {
"repo": "actions/setup-node",
"version": "v7.1.0",
Expand All @@ -108,11 +93,6 @@
"version": "v7.0.0",
"sha": "5fda3b95a4ea91299a34e894583c3862153e4b97"
},
"actions/upload-artifact@v7.0.1": {
"repo": "actions/upload-artifact",
"version": "v7.0.1",
"sha": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"
},
"actions/upload-artifact@v7.0.2": {
"repo": "actions/upload-artifact",
"version": "v7.0.2",
Expand Down Expand Up @@ -193,9 +173,9 @@
"version": "v1",
"sha": "5ac0f275b83d9d5a9342c6aae977ec32fa330daa"
},
"super-linter/super-linter@v9": {
"super-linter/super-linter@v9.0.0": {
"repo": "super-linter/super-linter",
"version": "v9",
"version": "v9.0.0",
"sha": "2da136927bd4a73596db63044b504547c62cb854"
}
},
Expand Down Expand Up @@ -895,11 +875,6 @@
"digest": "sha256:3d5dba0b0a139bbb11b5d5b8b44f277d2b18f69cf43090e3c283d750cf864baa",
"pinned_image": "ghcr.io/github/gh-aw-firewall/squid:0.28.9@sha256:3d5dba0b0a139bbb11b5d5b8b44f277d2b18f69cf43090e3c283d750cf864baa"
},
"ghcr.io/github/gh-aw-mcpg:v0.4.30": {
"image": "ghcr.io/github/gh-aw-mcpg:v0.4.30",
"digest": "sha256:ab5a436a1490438db473e4e3d4c973cb1d75e3cb233fb08b73d31b42d7d18fba",
"pinned_image": "ghcr.io/github/gh-aw-mcpg:v0.4.30@sha256:ab5a436a1490438db473e4e3d4c973cb1d75e3cb233fb08b73d31b42d7d18fba"
},
"ghcr.io/github/gh-aw-mcpg:v0.4.31": {
"image": "ghcr.io/github/gh-aw-mcpg:v0.4.31",
"digest": "sha256:dbec0f2ddef6adf83b7764019323096e3e5cc0f3886255f6320555b7fe2a7caf",
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/avenger.lock.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion .github/workflows/avenger.md
Original file line number Diff line number Diff line change
Expand Up @@ -98,7 +98,7 @@ steps:
go-version-file: go.mod
cache: true
- name: Setup Node.js
uses: actions/setup-node@v7.0.0
uses: actions/setup-node@v7.1.0
with:
node-version: "24"
cache: npm
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/ci-coach.lock.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading