pulse-triage[bot] f503b13442 Bind release dispatches to the admitted commit ...

A workflow dispatch by branch can resolve after that branch moves, allowing an unreviewed tip to enter the release pipeline. Require every publishing dispatch to name its expected source SHA and make the workflow reject a different source or workflow commit before checkout.

Change-source: pulse-maintainer
(cherry picked from commit a461fc9c0a)

2026-09-02 02:28:14 +01:00

..

testdata

Add rootful Docker secure-runtime qualification

2026-08-31 18:13:22 +01:00

windowslifecycleserver

Extract the transport-independent action lifecycle service

2026-07-10 11:06:55 +01:00

agent_id_recovery_unix_test.go

Restore Windows installer test compilation

2026-09-02 02:28:14 +01:00

agent_state_dir_lifecycle_test.go

Restore Windows installer test compilation

2026-09-02 02:28:14 +01:00

backfill_release_assets_test.go

Add historical release asset backfill workflow

2026-04-22 17:25:58 +01:00

build_release_assets_test.go

Bind release dispatches to the admitted commit

2026-09-02 02:28:14 +01:00

container_dependency_contract_test.go

Keep release toolchains within support

2026-08-30 06:40:25 +01:00

dependency_update_test.go

Keep release toolchains within support

2026-08-30 06:40:25 +01:00

docker_entrypoint_test.go

Refresh Pulse 6.1 RC1 mobile evidence

2026-07-13 19:41:41 +01:00

install_docker_sh_test.go

Prepare v6.4.3-rc.1 release

2026-09-01 21:37:41 +01:00

install_mcp_test.go

Restore delivery qualification trust

2026-08-31 03:02:13 +01:00

install_ps1_test.go

Refresh trusted checkout action

2026-09-01 02:31:08 +01:00

install_sh_qnap_data_volume_test.go

Run the QNAP agent from the data volume instead of the RAM-backed root

2026-08-21 06:35:52 +01:00

install_sh_test.go

Remove safe profile state on uninstall

2026-09-01 19:28:01 +01:00

integration_container_test.go

Keep release toolchains within support

2026-08-30 06:40:25 +01:00

native_pve_action_qualification_test.go

Add native PVE action qualification harness

2026-09-01 10:43:35 +01:00

provider_msp_deploy_test.go

Keep release toolchains within support

2026-08-30 06:40:25 +01:00

pulse_auto_update_test.go

Fix auto-update leaving service down after installer failure

2026-07-27 09:38:37 +01:00

release_ldflags_test.go

Require signed unified agent release assets

2026-04-22 02:00:29 +01:00

root_install_sh_test.go

Preserve Pulse severity in systemd journal

2026-08-31 11:46:51 +01:00

safe_profile_migration_test.go

Harden least-privilege installer lifecycle state

2026-09-01 15:53:02 +01:00

secure_runtime_platform_matrix_test.go

Integrate typed helper container summaries

2026-08-30 21:29:11 +01:00

secure_runtime_rootful_qualification_test.go

Harden rootful qualification evidence boundary

2026-09-01 23:53:36 +01:00

secure_runtime_rootless_qualification_test.go

Give rootless qualification hosts unique identities

2026-09-01 21:18:24 +01:00

secure_runtime_systemd_lab_test.go

Use portable helper network canary

2026-09-01 18:48:52 +01:00

umask_unix_test.go

Pin umask 022 in installtests so trust fixtures are host-independent

2026-09-01 22:20:15 +01:00

uninstall_sensor_proxy_test.go

fix(security): verify SSH hosts during proxy cleanup

2026-08-08 05:18:55 +01:00

windows_agent_lifecycle.ps1

Extract the transport-independent action lifecycle service

2026-07-10 11:06:55 +01:00