rcourtman 9e5e18f008 fix(release): qualify candidates before public version writes ...

A draft GitHub release does not hide its public Git tag or registry
images. Publishing those before qualification consumed a beta identity
when the candidate later failed.

Stage drafts without Git refs, join exact-source checks before public
tag, Docker and Helm publication, and preserve exposed tag identities.
Keep final digest verification before release activation.

2026-09-11 21:04:46 +01:00

..

testdata

Add rootful Docker secure-runtime qualification

2026-08-31 18:13:22 +01:00

windowslifecycleserver

Extract the transport-independent action lifecycle service

2026-07-10 11:06:55 +01:00

agent_id_recovery_unix_test.go

Restore Windows installer test compilation

2026-09-02 02:28:14 +01:00

agent_state_dir_lifecycle_test.go

Restore Windows installer test compilation

2026-09-02 02:28:14 +01:00

backfill_release_assets_test.go

Add historical release asset backfill workflow

2026-04-22 17:25:58 +01:00

build_release_assets_test.go

fix(release): qualify candidates before public version writes

2026-09-11 21:04:46 +01:00

container_dependency_contract_test.go

Keep release toolchains within support

2026-08-30 06:40:25 +01:00

dependency_update_test.go

Keep release toolchains within support

2026-08-30 06:40:25 +01:00

docker_entrypoint_test.go

Refresh Pulse 6.1 RC1 mobile evidence

2026-07-13 19:41:41 +01:00

install_docker_sh_test.go

Prepare v6.4.3-rc.1 release

2026-09-01 21:37:41 +01:00

install_mcp_test.go

Restore delivery qualification trust

2026-08-31 03:02:13 +01:00

install_ps1_test.go

ci: qualify setup-node v7 consumer contracts

2026-09-09 19:29:17 +01:00

install_sh_qnap_data_volume_test.go

Run the QNAP agent from the data volume instead of the RAM-backed root

2026-08-21 06:35:52 +01:00

install_sh_test.go

Fix portable root ownership for installer lifecycle state

2026-09-04 22:33:08 +01:00

integration_container_test.go

Advance release builds to Go 1.26.8

2026-09-04 07:20:28 +01:00

native_pve_action_qualification_test.go

Add native PVE action qualification harness

2026-09-01 10:43:35 +01:00

provider_msp_deploy_test.go

docs(msp): verify published evaluation bundle guidance

2026-09-09 20:23:20 +01:00

pulse_auto_update_test.go

Fix auto-update leaving service down after installer failure

2026-07-27 09:38:37 +01:00

release_ldflags_test.go

Require signed unified agent release assets

2026-04-22 02:00:29 +01:00

root_install_sh_test.go

Preserve Pulse severity in systemd journal

2026-08-31 11:46:51 +01:00

safe_profile_migration_test.go

Harden least-privilege installer lifecycle state

2026-09-01 15:53:02 +01:00

secure_runtime_platform_matrix_test.go

Integrate typed helper container summaries

2026-08-30 21:29:11 +01:00

secure_runtime_rootful_qualification_test.go

Tighten rootful runtime cleanup proof

2026-09-02 02:52:13 +01:00

secure_runtime_rootless_qualification_test.go

Give rootless qualification hosts unique identities

2026-09-01 21:18:24 +01:00

secure_runtime_systemd_lab_test.go

Use portable helper network canary

2026-09-01 18:48:52 +01:00

umask_unix_test.go

Pin umask 022 in installtests so trust fixtures are host-independent

2026-09-01 22:20:15 +01:00

uninstall_sensor_proxy_test.go

fix(security): verify SSH hosts during proxy cleanup

2026-08-08 05:18:55 +01:00

windows_agent_lifecycle.ps1

Extract the transport-independent action lifecycle service

2026-07-10 11:06:55 +01:00