pulse-triage[bot] 5add9bfc36 fix(ci): permit audited caller-only permission inheritance ...

The stable-install smoke body is intentionally workflow_call-only so its read-only continuity caller and draft-capable release caller can supply different explicit token budgets. Treat that exact no-override shape as an auditable permission boundary while continuing to reject independent triggers and job permission overrides.

Validation: 41 workflow-trust tests, repository workflow audit, focused install-smoke contract tests, Python compilation and diff checks pass.

Change-source: pulse-maintainer

2026-09-05 09:06:17 +01:00

..

integration

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

run.sh

test(scripts): run python smoke tests

2026-03-28 21:53:09 +00:00

test_benchmark_workflow_contract.py

Pair benchmark evidence on one runner

2026-09-04 13:13:04 +01:00

test_dependabot_config.py

Align the scheduled audit contract test

2026-09-04 13:13:04 +01:00

test_docs_mirror.py

Stop background git from racing test_docs_mirror temp cleanup

2026-09-02 09:55:47 +01:00

test_e2e_workflow_contract.py

Bound non-gating E2E probation failures

2026-08-28 04:26:34 +01:00

test_gitleaks_ignore.py

security: narrow historical secret scan allowlist

2026-08-08 03:17:57 +01:00

test_localized_public_docs.py

Add localized public docs entry points

2026-06-13 08:07:46 +01:00

test_npm_audit_retry.py

Align npm audit contracts after upstream merge

2026-09-04 14:31:31 +01:00

test_public_docs_claims.py

Align TrueNAS guidance with JSON-RPC runtime

2026-09-01 18:32:39 +01:00

test_repo_docs_link_drift.py

Allow standing triage disclosure link

2026-08-26 11:11:04 +01:00

test_require_safe_gh_attestation.py

Bind release activation to trusted provenance

2026-08-30 01:51:58 +01:00

test_sync_chart_release_metadata.py

fix(deploy): pin docs links to release refs

2026-03-28 21:32:11 +00:00

test_telemetry_adoption_report.py

Add privacy-safe alert quality telemetry

2026-08-29 14:00:28 +01:00

test_telemetry_schema_parity.py

Add privacy-safe telemetry lifecycle and outcome signals

2026-07-23 01:10:38 +01:00

test_validate_published_release.py

Authenticate every published installer

2026-08-31 04:55:15 +01:00

test_workflow_trust.py

fix(ci): permit audited caller-only permission inheritance

2026-09-05 09:06:17 +01:00

test_write_github_output.py

Close runner output alias bypasses

2026-09-01 16:54:07 +01:00

test-ci-benchmarks.sh

Pair benchmark evidence on one runner

2026-09-04 13:13:04 +01:00

test-cloud-public-signup-smoke.sh

Add Pulse Cloud public signup smoke

2026-04-23 23:09:10 +01:00

test-common-lib.sh

feat: add shared script library system and refactor docker-agent installer

2025-10-20 15:13:38 +00:00

test-hot-dev-auth.sh

Stabilize script smoke checks

2026-05-28 12:55:33 +01:00

test-hot-dev-bg.sh

fix(dev): preserve executable launchd wrapper mode

2026-08-27 17:54:10 +01:00

test-hot-dev-runtime.sh

Advance release builds to Go 1.26.8

2026-09-04 07:20:28 +01:00

test-install-ps1-parser.sh

Tighten unified agent hardening proof

2026-04-23 23:37:25 +01:00

test-install-update-resilience.sh

Guard auto-update asset staging and migrate stale update units

2026-07-28 11:56:52 +01:00

test-npm-audit-retry.sh

Bound the npm audit retry budget by wall clock

2026-09-04 12:13:31 +01:00

test-pulse-auto-update.sh

Fix auto-update leaving service down after installer failure

2026-07-27 09:38:37 +01:00

test-reclaim-closed-pr-capacity.sh

Reclaim CI capacity when pull requests close

2026-09-02 11:03:53 +01:00

test-retired-trial-acquisition-docs.sh

Rename retired trial acquisition proof assets

2026-04-28 18:38:10 +01:00

test-script-reference-integrity.sh

Switch script-reference integrity test from rg to git grep for portable CI

2026-05-12 00:30:43 +01:00

test-toggle-mock.sh

Scale large-estate workload and Proxmox demo performance

2026-08-23 15:09:32 +01:00