gsadmin/pulse
1
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-10-26 13:39:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
b3a27e2dd2c4d011be49188853f6ae0ce4f7fdbd
pulse/scripts
T
History
rcourtman b3a27e2dd2 Sync issue labels with GITHUB_TOKEN, not the triage App key 
The label sync was the only workflow that read PULSE_TRIAGE_APP_PRIVATE_KEY.
That key belongs to an App installation that can administer the repository,
and as a repository-level Actions secret any workflow run on any branch could
read it. Everything the helper does (read the issue, create, add and remove
labels) is covered by the run's own GITHUB_TOKEN with issues: write, so the
App key can now be deleted from Actions.

The policy test now requires issue-mutating workflows to use the scoped
GITHUB_TOKEN and to reference no secrets, and still requires the parser tests
to run before the label write. Silent labels are applied as
github-actions[bot]; AI_TRANSPARENCY.md says so.
2026-10-25 21:21:54 +00:00
..
dev
…
eval
…
installtests
Keep manual channel proof on the HTTPS transport envelope
2026-10-25 16:56:36 +00:00
intelligence_lab
Restore Patrol's Safe auto-fix and Autopilot modes
2026-10-12 14:13:47 +01:00
lib
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
lint-fixer
…
memory
ci: compare memory with the latest stable release every day
2026-10-21 14:16:15 +01:00
release_control
Keep Recovery overview proof separate from transfer safety
2026-10-25 10:39:21 +00:00
tests
Sync issue labels with GITHUB_TOKEN, not the triage App key
2026-10-25 21:21:54 +00:00
.go-version
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
audit-private-boundary.sh
Ratchet private boundary audit debt
2026-07-29 20:09:23 +01:00
backfill-release-assets.sh
…
BENCHMARK_EVIDENCE.md
fix: measure workload chart generation in performance guards
2026-10-18 17:32:34 +01:00
browser_os_packages.py
Cache browser OS packages so slow apt mirrors stop E2E
2026-10-23 18:02:39 +01:00
build-pve-backup-reconciliation.mjs
Retain PVE recovery history across incomplete backup scans
2026-10-23 20:46:39 +01:00
build-release-binaries.sh
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
build-release.sh
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
build-secure-runtime-qualification.sh
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
bundle.manifest
…
bundle.sh
…
capture-release-note-visuals.sh
Improve release highlights and reusable screenshot evidence
2026-10-15 11:42:25 +01:00
check_docs_mirror.py
Keep the docs guard out of the branch-tip link scan
2026-09-01 12:17:00 +01:00
check_notification_runtime.py
Respect deployment telemetry lock in notification CI journey
2026-10-11 05:18:21 +01:00
check_public_docs.py
Align TrueNAS guidance with JSON-RPC runtime
2026-09-01 18:32:39 +01:00
check_telemetry_schema_parity.py
Harden Patrol activation telemetry
2026-08-28 11:35:41 +01:00
check_workflow_trust.py
fix(ci): qualify the Actions patch and minor refresh
2026-10-14 17:38:18 +01:00
check-alert-diagnosis-ordering.mjs
fix(alerts): ignore superseded delivery diagnosis responses
2026-09-06 17:17:36 +01:00
check-alert-dispatch-copy.mjs
fix(alerts): distinguish dispatch from notification receipt
2026-09-06 15:12:07 +01:00
check-backup-app-refresh.mjs
Repair the remaining drawer and storage history browser proofs
2026-10-14 11:27:57 +01:00
check-backup-browser-polling.mjs
Preserve backup coverage row focus across polling snapshots
2026-09-05 01:33:47 +01:00
check-bench-regression.sh
Interpret byte-throughput benchmark changes in the right direction
2026-10-25 11:25:52 +00:00
check-browser-lifecycle-control.mjs
test(web): retain failing browser suspension control diagnostic
2026-09-08 07:00:33 +01:00
check-browser-single-session-control.mjs
test(web): cover production incident refresh after tab suspension
2026-09-08 08:42:45 +01:00
check-delivery-health-ordering.mjs
Merge current main and verify diagnostic workflows
2026-09-06 04:22:09 +01:00
check-delivery-log-ordering.mjs
fix(web): retain current delivery evidence across overlapping reads
2026-09-06 10:19:46 +01:00
check-delivery-server-error-copy.mjs
fix(web): identify notification destination server failures
2026-09-08 12:54:21 +01:00
check-docs-fragment-navigation.cjs
Document maintenance API and repair documentation section links
2026-09-21 07:23:24 +01:00
check-drawer-tab-retention.cjs
Chart history on Overview in Docker host and resource drawers
2026-10-13 23:30:46 +01:00
check-frontend-serialization.mjs
Reject stale Solid serialization overrides before frontend installation
2026-10-14 01:53:13 +01:00
check-github-release-immutability.sh
Gate release publication on immutable setting
2026-08-29 22:41:04 +01:00
check-host-disk-patrol.mjs
fix(patrol): resolve disk alerts through canonical resource owners
2026-10-08 17:22:29 +01:00
check-incident-request-ownership.mjs
fix(alerts): discard pending history reads after clearing
2026-09-10 06:44:37 +01:00
check-navigation-admission-race.mjs
test(web): qualify superseded admission and diagnose narrow table access
2026-09-05 17:57:42 +01:00
check-overview-health-refresh.mjs
Merge current main and verify diagnostic workflows
2026-09-06 04:22:09 +01:00
check-patrol-assistant-journey.mjs
Stop sending the ignored autonomous_mode chat field
2026-10-08 00:17:08 +01:00
check-pbs-host-history-correlation.cjs
Repair the PBS drawer browser fixture and its two proofs
2026-10-14 09:02:31 +01:00
check-pve-backup-reconciliation.cjs
Match the full workload identity in the PVE browser journey
2026-10-23 21:03:01 +01:00
check-recovery-feedback.mjs
test(web): verify recovery preserves real settings-parent edits
2026-09-07 16:39:11 +01:00
check-update-access-copy.mjs
fix(web): avoid prescribing permissions from update access failures
2026-09-08 21:59:40 +01:00
check-webhook-test-save-parity.mjs
fix(web): align webhook test custom fields with saved configuration
2026-09-08 23:29:31 +01:00
check-workflow-dispatch-inputs.py
…
ci_browser_proof_only.py
Avoid runtime CI fan-out for browser-receipt-only tree changes
2026-10-14 04:13:00 +01:00
ci_triage_only.py
Keep isolated issue-triage changes on their dedicated CI path
2026-10-25 09:04:08 +00:00
clean-mock-alerts.sh
…
cleanup.sh
…
cloud-backup.sh
…
collect_e2e_container_logs.py
Retain E2E container diagnostics without flooding Actions logs
2026-10-10 19:00:17 +01:00
com.pulse.hot-dev.plist.template
…
compile-go-tests.sh
Reject incompatible Go test fixtures before backend CI fan-out
2026-10-06 19:54:22 +01:00
conformance-smoke.sh
…
demo_public_browser_smoke.cjs
Prove demo auto sign-in in the public browser smoke
2026-10-24 14:31:21 +01:00
dependency_advisory_watch.py
Audit main without directing dependency repairs to retired lines
2026-10-10 23:43:37 +01:00
dev-check.sh
…
dev-deploy-agent.sh
…
dev-launchd-setup.sh
fix(dev): preserve executable launchd wrapper mode
2026-08-27 17:54:10 +01:00
dev-launchd-wrapper.sh
…
dev-prepush.sh
Fail closed when local pre-push source reads fail
2026-10-25 19:47:30 +00:00
diagnose-root-pair.py
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
diagnose-uuid-layout.py
ci: add fixed UUID layout diagnostic without release gate waiver
2026-09-06 22:11:03 +01:00
docker-build.sh
…
e2e_test_images.py
Build Core E2E test images once per exact workflow run
2026-10-09 22:25:34 +01:00
ensure_test_assets.sh
…
exclusive-lock.mjs
…
generate-pulse-intelligence-docs.go
backend and governance: MCP contract, agent capabilities, API, and release-control
2026-06-23 17:26:15 +01:00
generate-release-notes.sh
Keep a real change out of the Highlights example
2026-10-24 20:43:52 +01:00
generate-self-hosted-feature-catalog.go
Format generated self-hosted feature catalog with prettier in the generator
2026-07-27 11:58:05 +01:00
generate-types.go
Retire the Assistant chat window; alert Investigate runs Patrol
2026-10-23 00:15:04 +01:00
go-mod-download.sh
Keep a kill backstop on the bounded module download
2026-10-07 15:46:01 +01:00
go-test-compile-required.sh
Reject incompatible Go test fixtures before backend CI fan-out
2026-10-06 19:54:22 +01:00
history-clear-browser-fixture.mjs
fix(alerts): discard pending history reads after clearing
2026-09-10 06:44:37 +01:00
hot-dev-bg.sh
Point dev:verify at the Proxmox backups layout spec
2026-10-08 09:56:53 +01:00
hot-dev.sh
Keep hot-dev build temp on the configured Go temp volume
2026-08-31 22:11:38 +01:00
incident-browser-checks.md
test(alerts): distinguish staged recovery edits from saved intent
2026-09-08 10:32:49 +01:00
incident-browser-fixture.mjs
test(web): verify incident convergence after native tab suspension
2026-09-08 08:23:44 +01:00
incident-convergence-server.mjs
test(web): verify incident convergence after native tab suspension
2026-09-08 08:23:44 +01:00
install-container-agent.sh
Restore Docker agents to Hosts inventory
2026-07-23 22:06:56 +01:00
install-docker.sh
Prepare v6.6.0
2026-10-25 08:39:03 +00:00
install-go-toolchain.sh
build: move to Go 1.26.10 and Vite 6.4.5 for October advisories
2026-10-21 15:19:02 +01:00
install-mcp.ps1
Fail closed when installing MCP binaries
2026-08-30 05:11:55 +01:00
install-mcp.sh
fix(installer): verify checksums on FreeBSD without coreutils
2026-09-20 02:43:57 +01:00
install.ps1
Refuse Windows agent mutation until service removal is confirmed
2026-10-08 06:09:08 +01:00
install.sh
Keep the system hostname when migrating to the safe profile
2026-10-25 09:43:39 +00:00
npm_audit_process.py
Own audit subprocess cleanup through completion and cancellation
2026-10-13 05:34:03 +01:00
npm-audit-retry.sh
Preserve literal Bash audit invocation inside the owned group
2026-10-13 05:39:13 +01:00
package-helm-chart.sh
…
patrol_e2e_matrix.sh
…
playwright-apt.conf
Scope browser OS acquisition to the runner's signed Ubuntu sources
2026-10-25 04:00:03 +00:00
prepare-release-container-context.sh
Keep Windows agent update signatures addressable
2026-09-01 16:11:04 +01:00
pulse-auto-update.sh
Refuse incomplete updater manager observations
2026-10-14 11:58:09 +01:00
readme_entrypoints_test.py
Make getting-started installs fail closed and plans current
2026-10-02 02:53:31 +01:00
release_asset_common.sh
Keep Windows agent update signatures addressable
2026-09-01 16:11:04 +01:00
release_browser_packet.py
fix(release): admit real archive sizes and enforce workflow trust
2026-10-04 03:00:30 +01:00
release_browser_tailnet.py
Bind release browser qualification to the narrow CI identity
2026-10-04 04:57:17 +01:00
release_build_targets.sh
Separate agent remediation runtime
2026-08-29 23:48:28 +01:00
release_candidate_manifest.py
Enforce exact release visual assets
2026-08-29 02:59:47 +01:00
release_ldflags.sh
…
release_lifecycle_rehearsal_versions.py
Add shadow release lifecycle rehearsal workflow
2026-10-01 09:11:15 +01:00
release_lifecycle_rehearsal.sh
Stop release browser access at every authenticated refusal
2026-10-04 03:44:51 +01:00
release_update_key.go
Wire secure runtime RC qualification
2026-08-31 01:50:48 +01:00
release-go-test-events.py
fix(release): mark store-history SLO measurement windows
2026-09-09 01:34:22 +01:00
release-preflight-worker.sh
fix(release): give the rehearsal backend an explicit package timeout
2026-09-19 21:24:38 +01:00
release-resource-snapshot.py
chore(release): retain bounded backend resource evidence
2026-09-07 16:47:55 +01:00
remerge-parallel.sh
…
render_installers.go
…
repo-boundary-paid-surface.allowlist
Declare the shared reporting telemetry adapter boundary
2026-10-17 21:24:54 +01:00
repo-boundary-private-implementation.baseline
Ratchet private boundary audit debt
2026-07-29 20:09:23 +01:00
repo-boundary-regression.py
Declare the shared reporting telemetry adapter boundary
2026-10-17 21:24:54 +01:00
require-safe-gh-attestation.sh
Bind release activation to trusted provenance
2026-08-30 01:51:58 +01:00
run_cloud_public_signup_smoke.sh
…
run_demo_public_browser_smoke.sh
…
run_hosted_staging_smoke.sh
…
run-ci-benchmarks.sh
Keep paired PR benchmarks inside their time budget
2026-10-05 22:39:51 +01:00
run-native-pve-action-qualification.sh
Add native PVE action qualification harness
2026-09-01 10:43:35 +01:00
run-release-backend-tests.sh
Warm the pulse-agent build before the pinned release API shards
2026-10-12 16:28:14 +01:00
run-release-preflight.sh
Accelerate release qualification with exact-SHA worker
2026-08-12 17:07:12 +01:00
run-secure-runtime-rootful-qualification.sh
Tighten rootful runtime cleanup proof
2026-09-02 02:52:13 +01:00
run-secure-runtime-rootless-qualification.sh
Give rootless qualification hosts unique identities
2026-09-01 21:18:24 +01:00
scan-ci-secrets.sh
Scan delivered source history instead of an empty merge log
2026-10-14 05:15:15 +01:00
secure-runtime-rootful-runtime.sh
Tighten rootful runtime cleanup proof
2026-09-02 02:52:13 +01:00
security_review_auth_credentials.sh
Make security review baseline fail closed
2026-09-01 01:02:17 +01:00
session-handoff.sh
…
shard_go_tests.py
Harden release backend cold-run qualification
2026-08-28 03:36:33 +01:00
standalone.manifest
Require immutable attested releases
2026-08-29 19:59:04 +01:00
sync_chart_release_metadata.py
…
sync-production-config.sh
…
telemetry_adoption_report.py
Separate reporting generation days from successful repeat periods
2026-10-17 21:51:08 +01:00
test-vm-disk.sh
Bound the complete passive VM preflight read
2026-10-12 00:10:22 +01:00
toggle-mock.sh
Scale large-estate workload and Proxmox demo performance
2026-08-23 15:09:32 +01:00
trigger-release-dry-run.sh
Soak release candidates for 24 hours before stable
2026-09-28 16:42:46 +01:00
trigger-release.sh
Improve release highlights and reusable screenshot evidence
2026-10-15 11:42:25 +01:00
trigger-stable-patch.sh
Bind release dispatches to the admitted commit
2026-09-02 02:28:14 +01:00
uninstall-sensor-proxy.sh
Stop legacy sensor cleanup on unconfirmed service or container state
2026-10-07 22:07:07 +01:00
validate-published-release.sh
Authenticate every published installer
2026-08-31 04:55:15 +01:00
validate-release.sh
Keep Windows agent update signatures addressable
2026-09-01 16:11:04 +01:00
verify-github-release-integrity.sh
fix(release): reject ambiguous activation asset inventories
2026-09-05 15:43:23 +01:00
verify-release-container-images.sh
Retry registry reads when verifying release container images
2026-10-12 12:44:29 +01:00
verify-release-helm-chart.sh
Recover Helm Pages from attested OCI charts
2026-09-04 01:04:30 +01:00
verify-stable-container-aliases.sh
Continuously verify stable container aliases
2026-08-30 13:55:41 +01:00
write_github_output.py
Close runner output alias bypasses
2026-09-01 16:54:07 +01:00