pulse-triage[bot] 8f516a014b Bind release dispatches to the admitted commit ...

A workflow dispatch by branch can resolve after that branch moves, allowing an unreviewed tip to enter the release pipeline. Require every publishing dispatch to name its expected source SHA and make the workflow reject a different source or workflow commit before checkout.

Change-source: pulse-maintainer
(cherry picked from commit a461fc9c0a)
(cherry picked from commit f503b13442)

2026-09-07 12:49:23 +01:00

..

testdata

Add rootful Docker secure-runtime qualification

2026-08-31 18:13:22 +01:00

windowslifecycleserver

Extract the transport-independent action lifecycle service

2026-07-10 11:06:55 +01:00

agent_state_dir_lifecycle_test.go

Build the FIFO lifecycle installer test only on unix

2026-09-01 23:05:22 +01:00

backfill_release_assets_test.go

Add historical release asset backfill workflow

2026-04-22 17:25:58 +01:00

build_release_assets_test.go

Bind release dispatches to the admitted commit

2026-09-07 12:49:23 +01:00

container_dependency_contract_test.go

Keep release toolchains within support

2026-08-30 06:40:25 +01:00

dependency_update_test.go

Keep release toolchains within support

2026-08-30 06:40:25 +01:00

docker_entrypoint_test.go

Refresh Pulse 6.1 RC1 mobile evidence

2026-07-13 19:41:41 +01:00

install_docker_sh_test.go

chore(release): prepare v6.4.4-beta.1 checkpoint

2026-09-07 10:45:36 +01:00

install_mcp_test.go

Restore delivery qualification trust

2026-08-31 03:02:13 +01:00

install_ps1_test.go

Refresh trusted checkout action

2026-09-01 02:31:08 +01:00

install_sh_qnap_data_volume_test.go

Run the QNAP agent from the data volume instead of the RAM-backed root

2026-08-21 06:35:52 +01:00

install_sh_test.go

Fix portable root ownership for installer lifecycle state

2026-09-04 22:46:06 +01:00

integration_container_test.go

Keep release toolchains within support

2026-08-30 06:40:25 +01:00

native_pve_action_qualification_test.go

Add native PVE action qualification harness

2026-09-01 10:43:35 +01:00

provider_msp_deploy_test.go

Keep release toolchains within support

2026-08-30 06:40:25 +01:00

pulse_auto_update_test.go

Fix auto-update leaving service down after installer failure

2026-07-27 09:38:37 +01:00

release_ldflags_test.go

Require signed unified agent release assets

2026-04-22 02:00:29 +01:00

root_install_sh_test.go

Preserve Pulse severity in systemd journal

2026-08-31 11:46:51 +01:00

safe_profile_migration_test.go

Harden least-privilege installer lifecycle state

2026-09-01 15:53:02 +01:00

secure_runtime_platform_matrix_test.go

Integrate typed helper container summaries

2026-08-30 21:29:11 +01:00

secure_runtime_rootful_qualification_test.go

Harden rootful qualification evidence boundary

2026-09-01 23:53:36 +01:00

secure_runtime_rootless_qualification_test.go

Give rootless qualification hosts unique identities

2026-09-01 21:18:24 +01:00

secure_runtime_systemd_lab_test.go

Use portable helper network canary

2026-09-01 18:48:52 +01:00

umask_unix_test.go

Pin umask 022 in installtests so trust fixtures are host-independent

2026-09-01 22:20:15 +01:00

uninstall_sensor_proxy_test.go

fix(security): verify SSH hosts during proxy cleanup

2026-08-08 05:18:55 +01:00

windows_agent_lifecycle.ps1

Extract the transport-independent action lifecycle service

2026-07-10 11:06:55 +01:00