Dylan M. Taylor 2b4eb2c6d9 Merge pull request #83 from dylanmtaylor/security/workflows-hardening ...

security(workflows): strengthen SonarCloud project-key and FreeBSD architecture input validation (F-005, F-006, F-007, F-009, F-010)

2026-10-24 22:48:54 -04:00

..

ast-grep

ast-grep: a reusable structural-lint workflow driven by the app's sgconfig.yml (#80)

2026-10-24 19:29:21 -04:00

test_arch.py

fix(arch-package): preserve SPDX license expression and copy licenses with --remove-destination

2026-10-24 22:45:48 -04:00

test_ast_grep.py

ast-grep: a reusable structural-lint workflow driven by the app's sgconfig.yml (#80)

2026-10-24 19:29:21 -04:00

test_craft_fonts.py

Shared quality-gate workflow for the craft apps (gate.yml) (#69)

2026-10-23 12:15:49 -04:00

test_craft_i18n.py

fix(release): drop the i18n gate; missing translations never block (storytold/craft-i18n#20) (#79)

2026-10-23 17:06:45 -04:00

test_freebsd_cache.py

fix(freebsd-cache): fall back to a compatible cache when manifests move (#41)

2026-10-22 15:00:48 -04:00

test_freebsd_release.py

ci(release): cross-compile FreeBSD aarch64 in the x86_64 VM (#50)

2026-10-22 14:58:24 -04:00

test_freebsd.py

security(workflows): strengthen SonarCloud project-key and FreeBSD architecture input validation (F-005, F-006, F-007, F-009, F-010)

2026-10-24 22:44:09 -04:00

test_gate.py

Shared quality-gate workflow for the craft apps (gate.yml) (#69)

2026-10-23 12:15:49 -04:00

test_install_apt_packages.py

security(actions): harden apt package and resolve-version input handling (F-003, F-004)

2026-10-24 22:42:14 -04:00

test_linux_glibc.py

fix(release): give riscv64 packages the glibc floor of their runner (#62)

2026-10-22 17:10:08 -04:00

test_nix.py

security(nix): prevent shell injection through extra-args (#52)

2026-10-22 14:37:49 -04:00

test_release_inputs.py

security(release): prevent app-name shell injection in FreeBSD and server jobs (#55)

2026-10-22 14:47:14 -04:00

test_resolve_version.py

test(resolve-version): add test for CRLF sanitization in app-title

2026-10-24 22:46:59 -04:00

test_sonarcloud.py

security(workflows): strengthen SonarCloud project-key and FreeBSD architecture input validation (F-005, F-006, F-007, F-009, F-010)

2026-10-24 22:44:09 -04:00

test_supply_chain.py

fix(ci): keep release artifacts separate until names are checked (#31)

2026-10-22 17:09:19 -04:00

test_windows_arm64.py

security(windows-arm64): prevent PowerShell injection through installer inputs (#58)

2026-10-22 15:23:56 -04:00