mirror of
https://github.com/okieselbach/AutopilotMonitor.git
synced 2026-10-24 12:42:38 +00:00
Oliver Kieselbach
1b27babd17
zizmor (static analysis for GitHub Actions) now runs twice: locally before a
workflow commit (hard rule in .claude/CLAUDE.md) and as the `zizmor` job next to
the pin gate in action-pins.yml (zizmorcore/zizmor-action pinned by SHA, zizmor
1.30.1 pinned, SARIF into Code scanning, severity low and above). Like the pin
gate it reports and does not block. zizmor.yml holds the single reasoned ignore.
Baseline fixes so the gate starts green:
- persist-credentials: false on every checkout except combine-rules.yml, the one
job that pushes with the checkout credentials (ignored in zizmor.yml, with reason)
- publish-scripts.yml: id-token: write moves from the workflow to the publish job;
indexnow-notify.yml: permissions: {}
- deploy-mcp.yml: env values referenced as shell variables inside bash steps
instead of template expansion
- pester.yml / publish-scripts.yml: reusable workflow via the self-repository form
$/ (GitHub changelog 2026-07-30); the pin gate treats $/ like ./
- combine-rules.yml: ajv-cli installed with npm ci from rules/scripts/package-lock.json
(no ts-node peer, no lifecycle scripts) instead of an ad-hoc global install;
Dependabot watches /rules/scripts
- azure/login pin comment corrected to the tag the SHA actually is (v3.0.2; v3
moved on to v3.1.0), no runtime change
- Dependabot: 7-day cooldown on every ecosystem (security updates are exempt)
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
329 lines
12 KiB
JSON
329 lines
12 KiB
JSON
{
|
|
"name": "autopilot-monitor-rules-tooling",
|
|
"lockfileVersion": 3,
|
|
"requires": true,
|
|
"packages": {
|
|
"": {
|
|
"name": "autopilot-monitor-rules-tooling",
|
|
"devDependencies": {
|
|
"ajv-cli": "5.0.0",
|
|
"ajv-formats": "3.0.1"
|
|
}
|
|
},
|
|
"node_modules/ajv": {
|
|
"version": "8.20.0",
|
|
"resolved": "https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz",
|
|
"integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
|
|
"dev": true,
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"fast-deep-equal": "^3.1.3",
|
|
"fast-uri": "^3.0.1",
|
|
"json-schema-traverse": "^1.0.0",
|
|
"require-from-string": "^2.0.2"
|
|
},
|
|
"funding": {
|
|
"type": "github",
|
|
"url": "https://github.com/sponsors/epoberezkin"
|
|
}
|
|
},
|
|
"node_modules/ajv-cli": {
|
|
"version": "5.0.0",
|
|
"resolved": "https://registry.npmjs.org/ajv-cli/-/ajv-cli-5.0.0.tgz",
|
|
"integrity": "sha512-LY4m6dUv44HTyhV+u2z5uX4EhPYTM38Iv1jdgDJJJCyOOuqB8KtZEGjPZ2T+sh5ZIJrXUfgErYx/j3gLd3+PlQ==",
|
|
"dev": true,
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"ajv": "^8.0.0",
|
|
"fast-json-patch": "^2.0.0",
|
|
"glob": "^7.1.0",
|
|
"js-yaml": "^3.14.0",
|
|
"json-schema-migrate": "^2.0.0",
|
|
"json5": "^2.1.3",
|
|
"minimist": "^1.2.0"
|
|
},
|
|
"bin": {
|
|
"ajv": "dist/index.js"
|
|
},
|
|
"peerDependencies": {
|
|
"ts-node": ">=9.0.0"
|
|
},
|
|
"peerDependenciesMeta": {
|
|
"ts-node": {
|
|
"optional": true
|
|
}
|
|
}
|
|
},
|
|
"node_modules/ajv-formats": {
|
|
"version": "3.0.1",
|
|
"resolved": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-3.0.1.tgz",
|
|
"integrity": "sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==",
|
|
"dev": true,
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"ajv": "^8.0.0"
|
|
},
|
|
"peerDependencies": {
|
|
"ajv": "^8.0.0"
|
|
},
|
|
"peerDependenciesMeta": {
|
|
"ajv": {
|
|
"optional": true
|
|
}
|
|
}
|
|
},
|
|
"node_modules/argparse": {
|
|
"version": "1.0.10",
|
|
"resolved": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz",
|
|
"integrity": "sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==",
|
|
"dev": true,
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"sprintf-js": "~1.0.2"
|
|
}
|
|
},
|
|
"node_modules/balanced-match": {
|
|
"version": "1.0.2",
|
|
"resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
|
|
"integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
|
|
"dev": true,
|
|
"license": "MIT"
|
|
},
|
|
"node_modules/brace-expansion": {
|
|
"version": "1.1.21",
|
|
"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.21.tgz",
|
|
"integrity": "sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==",
|
|
"dev": true,
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"balanced-match": "^1.0.0",
|
|
"concat-map": "0.0.1"
|
|
}
|
|
},
|
|
"node_modules/concat-map": {
|
|
"version": "0.0.1",
|
|
"resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
|
|
"integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==",
|
|
"dev": true,
|
|
"license": "MIT"
|
|
},
|
|
"node_modules/esprima": {
|
|
"version": "4.0.1",
|
|
"resolved": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz",
|
|
"integrity": "sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==",
|
|
"dev": true,
|
|
"license": "BSD-2-Clause",
|
|
"bin": {
|
|
"esparse": "bin/esparse.js",
|
|
"esvalidate": "bin/esvalidate.js"
|
|
},
|
|
"engines": {
|
|
"node": ">=4"
|
|
}
|
|
},
|
|
"node_modules/fast-deep-equal": {
|
|
"version": "3.1.3",
|
|
"resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
|
|
"integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
|
|
"dev": true,
|
|
"license": "MIT"
|
|
},
|
|
"node_modules/fast-json-patch": {
|
|
"version": "2.2.1",
|
|
"resolved": "https://registry.npmjs.org/fast-json-patch/-/fast-json-patch-2.2.1.tgz",
|
|
"integrity": "sha512-4j5uBaTnsYAV5ebkidvxiLUYOwjQ+JSFljeqfTxCrH9bDmlCQaOJFS84oDJ2rAXZq2yskmk3ORfoP9DCwqFNig==",
|
|
"dev": true,
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"fast-deep-equal": "^2.0.1"
|
|
},
|
|
"engines": {
|
|
"node": ">= 0.4.0"
|
|
}
|
|
},
|
|
"node_modules/fast-json-patch/node_modules/fast-deep-equal": {
|
|
"version": "2.0.1",
|
|
"resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-2.0.1.tgz",
|
|
"integrity": "sha512-bCK/2Z4zLidyB4ReuIsvALH6w31YfAQDmXMqMx6FyfHqvBxtjC0eRumeSu4Bs3XtXwpyIywtSTrVT99BxY1f9w==",
|
|
"dev": true,
|
|
"license": "MIT"
|
|
},
|
|
"node_modules/fast-uri": {
|
|
"version": "3.1.8",
|
|
"resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
|
|
"integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
|
|
"dev": true,
|
|
"funding": [
|
|
{
|
|
"type": "github",
|
|
"url": "https://github.com/sponsors/fastify"
|
|
},
|
|
{
|
|
"type": "opencollective",
|
|
"url": "https://opencollective.com/fastify"
|
|
}
|
|
],
|
|
"license": "BSD-3-Clause"
|
|
},
|
|
"node_modules/fs.realpath": {
|
|
"version": "1.0.0",
|
|
"resolved": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz",
|
|
"integrity": "sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==",
|
|
"dev": true,
|
|
"license": "ISC"
|
|
},
|
|
"node_modules/glob": {
|
|
"version": "7.2.3",
|
|
"resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz",
|
|
"integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==",
|
|
"deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me",
|
|
"dev": true,
|
|
"license": "ISC",
|
|
"dependencies": {
|
|
"fs.realpath": "^1.0.0",
|
|
"inflight": "^1.0.4",
|
|
"inherits": "2",
|
|
"minimatch": "^3.1.1",
|
|
"once": "^1.3.0",
|
|
"path-is-absolute": "^1.0.0"
|
|
},
|
|
"engines": {
|
|
"node": "*"
|
|
},
|
|
"funding": {
|
|
"url": "https://github.com/sponsors/isaacs"
|
|
}
|
|
},
|
|
"node_modules/inflight": {
|
|
"version": "1.0.6",
|
|
"resolved": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz",
|
|
"integrity": "sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==",
|
|
"deprecated": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.",
|
|
"dev": true,
|
|
"license": "ISC",
|
|
"dependencies": {
|
|
"once": "^1.3.0",
|
|
"wrappy": "1"
|
|
}
|
|
},
|
|
"node_modules/inherits": {
|
|
"version": "2.0.4",
|
|
"resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
|
|
"integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
|
|
"dev": true,
|
|
"license": "ISC"
|
|
},
|
|
"node_modules/js-yaml": {
|
|
"version": "3.15.2",
|
|
"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.2.tgz",
|
|
"integrity": "sha512-6EuL879VkRA+1Cz578mKMiKvjPNEuk6+r1JaFzoSWejZmtf7xWbIyw1e3KkxlkzTIt9Taw6JBhEppG7utc1P+w==",
|
|
"dev": true,
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"argparse": "^1.0.7",
|
|
"esprima": "^4.0.0"
|
|
},
|
|
"bin": {
|
|
"js-yaml": "bin/js-yaml.js"
|
|
}
|
|
},
|
|
"node_modules/json-schema-migrate": {
|
|
"version": "2.0.0",
|
|
"resolved": "https://registry.npmjs.org/json-schema-migrate/-/json-schema-migrate-2.0.0.tgz",
|
|
"integrity": "sha512-r38SVTtojDRp4eD6WsCqiE0eNDt4v1WalBXb9cyZYw9ai5cGtBwzRNWjHzJl38w6TxFkXAIA7h+fyX3tnrAFhQ==",
|
|
"dev": true,
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"ajv": "^8.0.0"
|
|
}
|
|
},
|
|
"node_modules/json-schema-traverse": {
|
|
"version": "1.0.0",
|
|
"resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
|
|
"integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
|
|
"dev": true,
|
|
"license": "MIT"
|
|
},
|
|
"node_modules/json5": {
|
|
"version": "2.2.3",
|
|
"resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz",
|
|
"integrity": "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==",
|
|
"dev": true,
|
|
"license": "MIT",
|
|
"bin": {
|
|
"json5": "lib/cli.js"
|
|
},
|
|
"engines": {
|
|
"node": ">=6"
|
|
}
|
|
},
|
|
"node_modules/minimatch": {
|
|
"version": "3.1.5",
|
|
"resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.5.tgz",
|
|
"integrity": "sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==",
|
|
"dev": true,
|
|
"license": "ISC",
|
|
"dependencies": {
|
|
"brace-expansion": "^1.1.7"
|
|
},
|
|
"engines": {
|
|
"node": "*"
|
|
}
|
|
},
|
|
"node_modules/minimist": {
|
|
"version": "1.2.8",
|
|
"resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz",
|
|
"integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==",
|
|
"dev": true,
|
|
"license": "MIT",
|
|
"funding": {
|
|
"url": "https://github.com/sponsors/ljharb"
|
|
}
|
|
},
|
|
"node_modules/once": {
|
|
"version": "1.4.0",
|
|
"resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
|
|
"integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
|
|
"dev": true,
|
|
"license": "ISC",
|
|
"dependencies": {
|
|
"wrappy": "1"
|
|
}
|
|
},
|
|
"node_modules/path-is-absolute": {
|
|
"version": "1.0.1",
|
|
"resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
|
|
"integrity": "sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==",
|
|
"dev": true,
|
|
"license": "MIT",
|
|
"engines": {
|
|
"node": ">=0.10.0"
|
|
}
|
|
},
|
|
"node_modules/require-from-string": {
|
|
"version": "2.0.2",
|
|
"resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
|
|
"integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==",
|
|
"dev": true,
|
|
"license": "MIT",
|
|
"engines": {
|
|
"node": ">=0.10.0"
|
|
}
|
|
},
|
|
"node_modules/sprintf-js": {
|
|
"version": "1.0.3",
|
|
"resolved": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz",
|
|
"integrity": "sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==",
|
|
"dev": true,
|
|
"license": "BSD-3-Clause"
|
|
},
|
|
"node_modules/wrappy": {
|
|
"version": "1.0.2",
|
|
"resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
|
|
"integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
|
|
"dev": true,
|
|
"license": "ISC"
|
|
}
|
|
}
|
|
}
|