Commit Graph
3 Commits
Author SHA1 Message Date
ciregenz 04faff315a [eric] ci: fix mcp-bundles node path and whitelist wheel sboms in host-leakage 2026-06-01 15:01:13 -07:00
Eric 77ad8333c9 [eric] ci: stop host-leakage flagging the generic CI runner account
- skip the bare /Users/runner and /home/runner homes and the literal
  "runner" username: they collide with third-party embedded paths and the
  english word "runner" everywhere, burying real leaks in noise
- the precise /Users/runner/work + D:\a\openswarm work-dir patterns still
  catch a genuine leak from those accounts
2026-05-28 23:14:02 -07:00
Eric 19ca4d81ae [eric] ci: add verify-host-leakage that string-scans the packaged artifact (text files + app.asar) for the build hosts username and home dir, with PEP 610 dist-info metadata auto-allowed since it does not affect runtime 2026-05-28 00:55:45 -07:00