rcourtman 9406ceb23e Name workflow trust test inputs as references ...

CodeQL flagged the release_job helper as clear-text storage of a secret because its parameter was named secret. The value is only the ${{ secrets.NAME }} expression text written into a fixture workflow, never a credential, so the name now says that.

2026-10-26 08:47:48 +00:00

..

integration

…

check-frontend-serialization.test.mjs

Run serialization graph regression controls in the pre-install CI check

2026-10-14 01:54:51 +01:00

run.sh

Run complete script smoke checks in two isolated CI shards

2026-10-10 01:51:21 +01:00

test_admin_docs.py

Keep organisation API read recipes private and bounded

2026-10-09 19:06:13 +01:00

test_agent_auth_docs.py

Integrate reviewed terminal token-file preservation coverage

2026-10-12 01:22:33 +01:00

test_agent_docs.py

docs: correct customer docs that drifted from the source

2026-10-11 13:59:56 +01:00

test_agent_log_docs.py

Bound copied log diagnostics by bytes as well as records

2026-10-11 02:24:14 +01:00

test_agent_profile_docs.py

docs: correct customer docs that drifted from the source

2026-10-11 13:59:56 +01:00

test_agent_removal_systemd.py

Check agent removal against native hosted systemd

2026-10-12 06:08:07 +01:00

test_agent_storage_docs.py

Keep constrained NAS install guidance private and non-destructive

2026-10-05 07:25:14 +01:00

test_agent_uninstall_docs.py

Repair removal documentation and portable DSM fixture checks

2026-10-12 23:29:06 +01:00

test_api_auth_docs.py

Keep copied API calls on one literal target

2026-10-13 08:28:45 +01:00

test_api_failure_index.py

Retain bounded API shard skip observations

2026-10-07 08:08:02 +01:00

test_api_reference_routes.py

Teach route checks and contracts about RequireOrgAdmin

2026-10-17 10:24:15 +01:00

test_audit_recovery_docs.py

Bind audit help checks to the bounded selection decoder

2026-10-24 09:25:26 +01:00

test_authentication_diagnostic_docs.py

Keep direct proxy-auth probes off environment proxies

2026-10-13 07:13:38 +01:00

test_auto_update_service_state.py

Merge pending maintenance repairs with current main

2026-10-18 15:11:28 +01:00

test_auto_update_systemd.py

Keep signed manual update bootstraps on HTTPS

2026-10-25 15:47:43 +00:00

test_benchmark_workflow_contract.py

ci: retain exact benchmark collection provenance

2026-09-06 11:12:42 +01:00

test_bootstrap_import_docs.py

Retain existing state when startup import is configured

2026-10-12 05:03:18 +01:00

test_browser_os_packages.py

Cache browser OS packages so slow apt mirrors stop E2E

2026-10-23 18:02:39 +01:00

test_ci_browser_proof_only.py

Keep isolated issue-triage changes on their dedicated CI path

2026-10-25 09:04:08 +00:00

test_ci_secret_scan.py

Scan delivered source history instead of an empty merge log

2026-10-14 05:15:15 +01:00

test_cloud_migration_docs.py

Keep Cloud migration within configuration-transfer limits

2026-10-09 22:21:03 +01:00

test_configuration_auth_docs.py

Keep installation quick starts on bootstrap authentication

2026-10-03 08:43:25 +01:00

test_contribution_report_safety.py

Make safe reporting reachable from the documentation entrypoints

2026-10-12 01:46:48 +01:00

test_dependabot_config.py

Separate storage runtime dependency proposals from other Go patches

2026-10-24 06:17:42 +01:00

test_dependency_advisory_watch.py

Audit main without directing dependency repairs to retired lines

2026-10-10 23:43:37 +01:00

test_deployment_update_docs.py

Keep installation update help on state-preserving procedures

2026-10-07 09:24:32 +01:00

test_dev_prepush_frontend.py

Fail closed when local pre-push source reads fail

2026-10-25 19:47:30 +00:00

test_docker_resource_sizing_docs.py

Keep Docker healthcheck guidance free of arbitrary resource caps

2026-10-13 14:48:54 +01:00

test_docker_troubleshooting_docs.py

Bound passive agent log collection across help entry points

2026-10-07 18:06:37 +01:00

test_docs_mirror.py

Stop background git from racing test_docs_mirror temp cleanup

2026-09-02 09:55:47 +01:00

test_e2e_container_logs.py

fix(ci): qualify the Actions patch and minor refresh

2026-10-14 17:38:18 +01:00

test_e2e_test_images.py

Run native settings scroll regressions in browser CI

2026-10-25 01:54:59 +01:00

test_e2e_workflow_contract.py

Shard internal/api race tests and drop probation E2E from PRs

2026-09-29 11:43:57 +01:00

test_external_agent_docs.py

Check credential boundaries independently of sentence capitalisation

2026-10-09 23:29:26 +01:00

test_failed_upgrade_intake_docs.py

Separate failed-upgrade attempts from observed recovery in issue intake

2026-10-10 11:39:23 +01:00

test_faq_deployment_docs.py

Explain the boundary between alert Off and Patrol findings

2026-10-11 19:03:47 +01:00

test_frontend_real_embed.py

Retain checkout-read failure before real-embed compilation

2026-10-10 14:01:13 +01:00

test_frontend_workflow_order.py

Assert required frontend steps before comparing their order

2026-10-07 00:07:24 +01:00

test_gitleaks_ignore.py

…

test_go_mod_download.py

Keep a kill backstop on the bounded module download

2026-10-07 15:46:01 +01:00

test_go_package_shards.py

Start slow non-API test packages before the small-package tail

2026-10-10 01:08:54 +01:00

test_go_test_compilation.py

Reject incompatible Go test fixtures before backend CI fan-out

2026-10-06 19:54:22 +01:00

test_guest_disk_reading_docs.py

Bind disk-help assertions to current unavailable-reading copy

2026-10-14 00:13:42 +01:00

test_guest_network_troubleshooting_docs.py

Keep guest reading guidance separate from coverage and routing

2026-10-09 14:14:13 +01:00

test_icmp_privilege_docs.py

Keep ICMP permission recovery scoped to the observation host

2026-10-10 05:49:51 +01:00

test_localized_public_docs.py

Point localized READMEs at the current licence screen

2026-10-22 11:00:31 +01:00

test_login_troubleshooting_docs.py

Distinguish login failures by credential source and request path

2026-10-06 13:26:49 +01:00

test_memory_troubleshooting_docs.py

Read agentless LXC listing memory as real pressure in Patrol

2026-10-17 00:38:36 +01:00

test_native_installer_contract_runner.py

Share native installer execution controls with script smoke tests

2026-10-18 17:55:06 +01:00

test_navigation_help_docs.py

Point monitoring help at the current platform navigation

2026-10-03 02:32:05 +01:00

test_node_api_docs.py

Create node API documentation fixtures privately from the start

2026-10-10 06:24:36 +01:00

test_notification_runtime.py

Respect deployment telemetry lock in notification CI journey

2026-10-11 05:18:21 +01:00

test_notification_troubleshooting_docs.py

Bound copied log diagnostics by bytes as well as records

2026-10-11 02:24:14 +01:00

test_npm_audit_retry.py

Preserve literal Bash audit invocation inside the owned group

2026-10-13 05:39:13 +01:00

test_oidc_session_docs.py

Check administrator rights without assuming non-admins are read-only

2026-10-12 06:50:03 +01:00

test_password_recovery_docs.py

Recover local logins without deleting authentication state

2026-10-03 09:25:52 +01:00

test_patrol_rule_help.py

Lead Patrol rule removal help with the existing UI

2026-10-05 21:51:17 +01:00

test_pbs_docs.py

Align PBS source guidance with current backup table labels

2026-10-08 06:54:22 +01:00

test_performance_troubleshooting_docs.py

Require observed reader termination within the existing deadline budget

2026-10-09 23:39:25 +01:00

test_playwright_acquisition.py

Scope browser OS acquisition to the runner's signed Ubuntu sources

2026-10-25 04:00:03 +00:00

test_pmg_docs.py

Match the Mail Gateway window check to the shared drawer

2026-10-22 17:00:53 +01:00

test_precommit_admission.py

Keep local safety checks effective on large staged changes

2026-10-25 03:33:27 +00:00

test_production_rollout_docs.py

Keep Operational Trust upgrade checks read-only

2026-10-09 21:37:45 +01:00

test_public_docs_claims.py

Align TrueNAS guidance with JSON-RPC runtime

2026-09-01 18:32:39 +01:00

test_public_docs_workflow.py

Run complete documentation safety suites on docs-only changes

2026-10-09 19:10:29 +01:00

test_public_report_containment_docs.py

Explain safe containment after an accidental public disclosure

2026-10-10 09:54:36 +01:00

test_pve_backup_troubleshooting_docs.py

Record the Kubernetes chunk size and new record drawer labels

2026-10-22 15:33:15 +01:00

test_pve_helper_guidance.py

Name scoped legacy PCT access without implying root is required

2026-10-14 06:27:36 +01:00

test_raid_troubleshooting_docs.py

Explain RAID spare alerts without changing the array

2026-10-14 13:48:43 +01:00

test_release_browser_packet.py

Bind release browser qualification to the narrow CI identity

2026-10-04 04:57:17 +01:00

test_release_browser_tailnet.py

Bind release browser qualification to the narrow CI identity

2026-10-04 04:57:17 +01:00

test_release_lifecycle_rehearsal.py

Keep late browser refusal terminal during context cleanup

2026-10-04 03:55:53 +01:00

test_release_train_ci_contract.py

fix(ci): include release trains in build and E2E triggers

2026-09-06 00:58:57 +01:00

test_repo_docs_link_drift.py

Integrate reviewed bounded private RBAC administrative guidance

2026-10-09 18:51:01 +01:00

test_require_safe_gh_attestation.py

…

test_root_pair_diagnostic.py

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

test_running_version_help_docs.py

Find affected versions without replaying an update

2026-10-14 22:47:14 +01:00

test_scheduler_polling_docs.py

Keep scheduler diagnostics private and failure-aware

2026-10-03 13:13:21 +01:00

test_security_docs.py

Keep security verification bounded and preserve logging state

2026-10-11 23:11:34 +01:00

test_server_config_backups.py

Preserve prior installer snapshots on retry

2026-10-23 22:39:08 +01:00

test_server_installer_stop.py

Stage server update archives on the install filesystem, not /tmp

2026-10-16 23:49:36 +01:00

test_server_installer_temporary_inputs.py

Stage server update archives on the install filesystem, not /tmp

2026-10-16 23:49:36 +01:00

test_server_release_selection.py

Select only published server releases in the installer

2026-10-09 08:29:32 +01:00

test_server_service_discovery.py

Preserve first service-inventory evidence with upstream fresh-host repair

2026-10-12 10:15:52 +01:00

test_server_update_containment_docs.py

Explain timer-only containment after uncertain server updates

2026-10-10 12:25:47 +01:00

test_server_update_menu.py

Bind unattended installer updates to exact menu targets

2026-10-09 09:20:16 +01:00

test_server_update_repair.py

Admit silent unit absence without losing inventory failures

2026-10-12 03:15:49 +01:00

test_server_update_timer.py

Treat no matching unit files as an empty service inventory

2026-10-12 09:26:34 +01:00

test_setup_access_docs.py

Contain Kubernetes token setup and permission diagnostics

2026-10-12 05:29:51 +01:00

test_signed_installer_docs.py

Preserve alert lifecycle truth and safe pinned updates

2026-09-24 17:43:50 +01:00

test_smoke_runner.py

Run complete script smoke checks in two isolated CI shards

2026-10-10 01:51:21 +01:00

test_smoke_workflow.py

Run complete script smoke checks in two isolated CI shards

2026-10-10 01:51:21 +01:00

test_sync_chart_release_metadata.py

…

test_telemetry_adoption_report.py

Separate reporting generation days from successful repeat periods

2026-10-17 21:51:08 +01:00

test_telemetry_schema_parity.py

…

test_transparency_docs.py

Keep retest timeout conditional until the issue is closed

2026-10-11 12:35:04 +01:00

test_troubleshooting_logs.py

Make synthetic log-reader survival failures attributable

2026-10-24 10:49:27 +01:00

test_truenas_docs.py

docs: correct customer docs that drifted from the source

2026-10-11 13:59:56 +01:00

test_unraid_troubleshooting_docs.py

Explain Unraid empty slots without hiding missing members

2026-10-14 20:00:33 +01:00

test_update_recovery_docs.py

Record the Kubernetes chunk size and new record drawer labels

2026-10-22 15:33:15 +01:00

test_upgrade_v5_docs.py

Route historical upgrades through current recovery safeguards

2026-10-12 04:45:29 +01:00

test_upgrade_v6_docs.py

Keep v6 migration on preserved-state upgrade paths

2026-10-13 09:53:09 +01:00

test_uuid_layout_diagnostic.py

ci: add fixed UUID layout diagnostic without release gate waiver

2026-09-06 22:11:03 +01:00

test_validate_published_release.py

test(release): reject signatures outside the configured trust boundary

2026-09-05 17:17:54 +01:00

test_vm_disk_diagnostics.py

Bound the complete passive VM preflight read

2026-10-12 00:10:22 +01:00

test_webhook_verification_docs.py

Clarify the existing webhook correlation contract

2026-10-04 08:44:50 +01:00

test_workflow_trust.py

Name workflow trust test inputs as references

2026-10-26 08:47:48 +00:00

test_write_github_output.py

Close runner output alias bypasses

2026-09-01 16:54:07 +01:00

test-ci-benchmarks.sh

Interpret byte-throughput benchmark changes in the right direction

2026-10-25 11:25:52 +00:00

test-cloud-public-signup-smoke.sh

…

test-common-lib.sh

…

test-e2e-fixture-admission.sh

Make fixture admission executable through script smoke

2026-10-10 06:01:33 +01:00

test-e2e-runner-cleanup.sh

Tear down failed E2E setup without clearing another run's handoff

2026-10-10 05:08:02 +01:00

test-hot-dev-auth.sh

…

test-hot-dev-bg.sh

Reconcile the separated metrics and HTTP dependency graph

2026-10-24 07:11:14 +01:00

test-hot-dev-runtime.sh

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

test-install-ps1-parser.sh

…

test-install-update-resilience.sh

Refuse server replacement until Pulse is confirmed stopped

2026-10-07 08:41:36 +01:00

test-npm-audit-retry.sh

Require successful npm audit completion before a clean verdict

2026-10-06 05:44:41 +01:00

test-pulse-auto-update.sh

Exercise updater smoke trap cleanup past its explicit runtime handoff

2026-10-11 18:43:48 +01:00

test-reclaim-closed-pr-capacity.sh

Reclaim CI capacity when pull requests close

2026-09-02 11:03:53 +01:00

test-retired-trial-acquisition-docs.sh

…

test-script-reference-integrity.sh

…

test-toggle-mock.sh

…