haelyra bab38ae91b fix(security): close installer filesystem races ...

Use no-follow file descriptors for legacy Codex snapshots, verification, restoration, and marker cleanup. Quarantine candidate removals and verify inode identity before deletion.

Carry the lifecycle runner as a verified artifact so privileged release workflows never dynamically check out and execute an output-selected revision.

2026-08-13 16:59:06 -04:00

..

ci.yml

fix(install): harden ECC installer lifecycle

2026-08-13 16:42:51 -04:00

discussion-announce.yml

fix: deliver announcements through a scoped Discord webhook (#2737)

2026-08-09 16:41:27 -04:00

generator-generic-ossf-slsa3-publish.yml

chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#2590)

2026-08-11 17:24:13 -04:00

maintenance.yml

chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#2590)

2026-08-11 17:24:13 -04:00

monthly-metrics.yml

build(deps): bump actions/github-script from 8.0.0 to 9.0.0

2026-04-12 04:52:39 +00:00

release-announce.yml

fix: deliver announcements through a scoped Discord webhook (#2737)

2026-08-09 16:41:27 -04:00

release.yml

fix(security): close installer filesystem races

2026-08-13 16:59:06 -04:00

reusable-release.yml

fix(security): close installer filesystem races

2026-08-13 16:59:06 -04:00

reusable-test.yml

chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#2590)

2026-08-11 17:24:13 -04:00

reusable-validate.yml

chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#2590)

2026-08-11 17:24:13 -04:00

supply-chain-watch.yml

chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#2590)

2026-08-11 17:24:13 -04:00