commits on master / docs/plans/dependency-security.md

back to file · full history

• Images: a current Debian base, checked nightly, bumped by the bot 990181a

  Gabriel Morell · 2026-10-23 06:07

  ✓ build / android (push) ✓ build / build (push) ✓ build / cli (push) ✓ build / deb (push) ✓ hello / smoke (push)
• dependency-updates: daily, not weekly dba03dd

  Gabriel Morell · 2026-10-23 05:32

• Advisories C1: dependency alerts, scanned on push, on a Security tab 8389210

  Gabriel Morell · 2026-10-23 04:40

• Security update pull requests from CI (B) 9c7f1f9

  Gabriel Morell · 2026-10-22 21:17

• Job tokens: one hop, and a cap per run (A2) d3fedc5

  Gabriel Morell · 2026-10-22 21:04

  ✓ build / android (push) ✓ build / build (push) ✓ build / cli (push) ✓ build / deb (push) ✓ hello / smoke (push)
• Job tokens that open issues and pull requests (A1) 16cf1ed

  Gabriel Morell · 2026-10-22 20:53

• Plan: mirror by default, opt-in per org, the scanner shipped on its own, dogfood on our own findings f98b9a7

  Gabriel Morell · 2026-10-22 19:52

  ✗ audit / osv (workflow_dispatch) ✓ build / android (push) ✓ build / build (push) ✓ build / cli (push) ✓ build / deb (push) ✓ hello / smoke (push)
• Plan: dependency security decisions, and what an OSV mirror costs 29569b7

  Gabriel Morell · 2026-10-22 19:43

• CI: a nightly osv-scanner audit of the forge's lockfiles; plan for dependency security b05f3a1

  Gabriel Morell · 2026-10-22 19:37