Skip to content

fix: safely inventory security-relevant diff changes #89

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
mldangelo-oai wants to merge 51 commits into
base: main
Choose a base branch
from
+1,615 −10
Open

fix: safely inventory security-relevant diff changes #89

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
51 commits
Select commit Hold shift + click to select a range
dfab566
fix: safely inventory security-relevant diff changes
mldangelo-oai Jul 29, 2026
dff846e
fix: fail closed on unsafe security-relevant diff paths
mldangelo-oai Jul 30, 2026
88b44d9
Merge commit '630810bacbb88729204a87b80dd8ae3a7f10d187' into mdangelo…
mldangelo-oai Jul 30, 2026
c8e9656
fix: bind immutable diffs to snapshot digests
createsomethingtoday Jul 30, 2026
65b0b52
test: disable Python bytecode during diff snapshot smoke
mldangelo-oai Jul 30, 2026
5b439d0
fix: bind immutable diff review to canonical Git objects
mldangelo-oai Jul 30, 2026
b411a5f
Merge remote-tracking branch 'origin/main' into mdangelo/codex/safe-c…
mldangelo-oai Jul 30, 2026
f5d60e9
fix: bind workbench Git to trusted executable
GautamSharma99 Jul 30, 2026
d9cb861
test: pass trusted Git through immutable snapshot fixtures
mldangelo-oai Jul 30, 2026
6131991
test: allow Windows credential isolation checks enough setup time
mldangelo-oai Jul 30, 2026
87adf85
Revert "test: allow Windows credential isolation checks enough setup …
mldangelo-oai Jul 30, 2026
8efca11
fix: bind diff inventory to immutable trusted Git snapshots
mldangelo-oai Jul 30, 2026
ce102af
fix: preserve immutable gitlink inventory across type changes
mldangelo-oai Jul 30, 2026
49dd7ca
fix: bind all security relevant diff surfaces and staged blobs
mldangelo-oai Jul 30, 2026
3a2dd57
test: synchronously flush synthetic ChatGPT login prompts
mldangelo-oai Jul 30, 2026
d296225
fix: preserve trusted runtime paths and historical Git snapshots
mldangelo-oai Jul 30, 2026
9ea6fd0
test: serialize Windows filesystem identities in snapshot fixtures
mldangelo-oai Jul 30, 2026
271d3f2
fix: harden nested Git boundaries and staged snapshot review
mldangelo-oai Jul 30, 2026
b928727
fix: include staged and untracked local patch contents
mldangelo-oai Jul 30, 2026
f10a22b
fix: review every staged and working-tree diff representation
mldangelo-oai Jul 30, 2026
c82d8e7
fix: preserve every unresolved Git merge conflict stage
mldangelo-oai Jul 30, 2026
70b4e2a
fix: preserve conflicted Git symlink and submodule stages
mldangelo-oai Jul 30, 2026
a0cf632
fix: bind every conflicted Git index stage to scan snapshots
mldangelo-oai Jul 30, 2026
b2f1d9d
fix: preserve conflicted submodule and snapshot compatibility
mldangelo-oai Jul 30, 2026
24d97a2
fix: detect conflict-stage changes during active scans
mldangelo-oai Jul 30, 2026
222f0de
fix: bind diff snapshots to one authoritative digest
mldangelo-oai Aug 3, 2026
39a8323
fix: include overlooked CI ownership and deleted workflow content
mldangelo-oai Aug 3, 2026
d9b5cd0
chore: merge latest main into secure diff inventory
mldangelo-oai Aug 3, 2026
f0e409d
fix: include executable devcontainer configuration in diff scans
mldangelo-oai Aug 3, 2026
d326ab9
fix: preserve recreated files after staged workflow deletion
mldangelo-oai Aug 3, 2026
316bb26
Merge branch 'main' into mdangelo/codex/safe-complete-diff-inventory
mldangelo-oai Aug 3, 2026
0b94765
fix: preserve trusted Git identity and diff snapshots
mldangelo-oai Aug 4, 2026
360ac7d
fix: bind Git trust and embedded repository inventory
mldangelo-oai Aug 4, 2026
eb8930e
fix: protect nested scans with their outer Git boundary
mldangelo-oai Aug 4, 2026
fd767e8
fix: pin legacy sealed diff scan manifests
mldangelo-oai Aug 4, 2026
4626dbd
fix: merge main and simplify secure diff inventory
mldangelo-oai Aug 5, 2026
ea71a88
fix: narrow diff review to security-relevant changed files
mldangelo-oai Aug 5, 2026
b2ea38c
fix: inventory selected revision policy and action changes safely
mldangelo-oai Aug 5, 2026
89f89cb
Merge main and complete security-sensitive diff inventory
mldangelo-oai Aug 10, 2026
6be9835
Keep staged pins for uninitialized action submodules
mldangelo-oai Aug 10, 2026
f7dc29e
Bind staged, deleted, and encoded diff sources to exact Git objects
mldangelo-oai Aug 10, 2026
030bf7f
Bind full revision reviews to immutable selected commits
mldangelo-oai Aug 10, 2026
27c2000
fix(scan): keep diff inventory within declared boundaries
mldangelo-oai Aug 10, 2026
7daad6b
Preserve Git conflict pins and honor checkout file-mode boundaries
mldangelo-oai Aug 10, 2026
1670a68
Review initialized submodule conflicts and every staged file mode
mldangelo-oai Aug 10, 2026
cd04e32
Preserve mixed submodule conflicts and binary stage modes
mldangelo-oai Aug 10, 2026
65bfbe6
Merge current main and preserve scoped inventory protections
mldangelo-oai Aug 10, 2026
aa55f4e
fix: reject unreadable diff objects and preserve binary modes
mldangelo-oai Aug 10, 2026
32c9ef1
fix(diff): require literal paths for indexed Git lookups
mldangelo-oai Aug 10, 2026
bb03bfb
fix(scan): verify complete diff inventory boundaries
mldangelo-oai Aug 10, 2026
2abe213
fix(scan): verify staged Git objects and deletions
mldangelo-oai Aug 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Loading