Skip to content

Actions: github/spec-kit

Actions

Security Audit

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
security.yml
817 workflow runs
817 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix(bundler): read the authoritative default_integration field, not only its legacy aliases Security Audit #749: Pull request #3880 synchronize by jawwad-ali
27s jawwad-ali:fix/bundler-default-integration-field
jawwad-ali:fix/bundler-default-integration-field
27s
fix(workflows): report a falsy non-mapping overlay manifest as a shape error Security Audit #748: Pull request #3884 synchronize by jawwad-ali
Action required jawwad-ali:fix/overlay-falsy-nonmapping-manifest
jawwad-ali:fix/overlay-falsy-nonmapping-manifest
Action required
fix(workflows): fail a gate whose on_reject is not abort/skip/retry (… Security Audit #747: Commit d1e86f6 pushed by mnriem
23s main
main
23s
fix(bundler): resolve built-in step types when checking bundle component references Security Audit #746: Pull request #3885 synchronize by jawwad-ali
Action required jawwad-ali:fix/bundler-builtin-step-references
jawwad-ali:fix/bundler-builtin-step-references
Action required
fix(presets): validate required manifest mappings (#3898) Security Audit #745: Commit 400ad01 pushed by mnriem
23s main
main
23s
fix: eliminate TOCTOU race in zip packaging (#3855) Security Audit #744: Commit 642fa56 pushed by mnriem
19s main
main
19s
fix(workflows): fail a fan-in step whose output is not a mapping (#3887) Security Audit #743: Commit 521020b pushed by mnriem
21s main
main
21s
fix(workflows): refetch non-UTF-8 catalog caches (#3901) Security Audit #742: Commit 14e8235 pushed by mnriem
21s main
main
21s
fix(bundler): wrap local catalog decode failures (#3902) Security Audit #741: Commit 1831fff pushed by mnriem
16s main
main
16s
fix: eliminate TOCTOU race in zip packaging Security Audit #740: Pull request #3855 synchronize by Quratulain-bilal
25s Quratulain-bilal:fix/packager-toctou
Quratulain-bilal:fix/packager-toctou
25s
Add --extension flag to specify init for opting into extensions a… Security Audit #739: Commit ba7ae79 pushed by mnriem
27s main
main
27s
fix: log rollback errors instead of silently swallowing them Security Audit #738: Pull request #3926 opened by Quratulain-bilal
Action required Quratulain-bilal:fix/rollback-log-errors
Quratulain-bilal:fix/rollback-log-errors
Action required
fix: catch OSError in streaming dispatch_command() Security Audit #737: Pull request #3925 opened by Quratulain-bilal
Action required Quratulain-bilal:fix/streaming-oserror-handler
Quratulain-bilal:fix/streaming-oserror-handler
Action required
fix: make save_init_options() write atomically Security Audit #736: Pull request #3924 opened by Quratulain-bilal
Action required Quratulain-bilal:fix/init-options-atomic-write
Quratulain-bilal:fix/init-options-atomic-write
Action required
fix: make StepRegistry atomic and raise on corruption Security Audit #735: Pull request #3922 opened by Quratulain-bilal
Action required Quratulain-bilal:fix/step-registry-atomic-save
Quratulain-bilal:fix/step-registry-atomic-save
Action required
fix: narrow exception in kimi skill detection from Exception to specific types Security Audit #734: Pull request #3923 opened by Quratulain-bilal
Action required Quratulain-bilal:fix/kimi-narrow-exception
Quratulain-bilal:fix/kimi-narrow-exception
Action required
fix: handle TimeoutExpired and OSError in dispatch_command() Security Audit #733: Pull request #3921 opened by Quratulain-bilal
Action required Quratulain-bilal:fix/dispatch-timeout-handler
Quratulain-bilal:fix/dispatch-timeout-handler
Action required
fix: use missing_ok for temp file cleanup to avoid masking errors Security Audit #732: Pull request #3820 synchronize by Quratulain-bilal
Action required Quratulain-bilal:fix/presets-registry-encoding
Quratulain-bilal:fix/presets-registry-encoding
Action required
fix: bound response reads in workflow catalog fetch Security Audit #731: Pull request #3813 synchronize by Quratulain-bilal
Action required Quratulain-bilal:fix/unbounded-workflow-catalog-read
Quratulain-bilal:fix/unbounded-workflow-catalog-read
Action required
fix: narrow bare except Exception in VS Code settings merge Security Audit #730: Pull request #3844 synchronize by Quratulain-bilal
Action required Quratulain-bilal:fix/utils-narrow-exception
Quratulain-bilal:fix/utils-narrow-exception
Action required
Add --extension flag to specify init for opting into extensions at init time Security Audit #729: Pull request #3914 synchronize by mnriem
23s mnriem:mnriem-add-extension-flag-to-specify-init
mnriem:mnriem-add-extension-flag-to-specify-init
23s
fix: bound response reads in extension catalog and download (#3775) Security Audit #728: Commit 36cb7e3 pushed by mnriem
22s main
main
22s
fix: use chunked read for integration and preset manifest hash Security Audit #727: Pull request #3843 synchronize by Quratulain-bilal
Action required Quratulain-bilal:fix/integrations-hash-chunked-read
Quratulain-bilal:fix/integrations-hash-chunked-read
Action required
fix(workflows): reject a retry gate whose verdict enum forbids the re… Security Audit #726: Commit cf71d00 pushed by mnriem
16s main
main
16s
fix: use bounded read for bundle download HTTP responses Security Audit #725: Pull request #3764 synchronize by Quratulain-bilal
Action required Quratulain-bilal:fix/unbounded-bundle-download
Quratulain-bilal:fix/unbounded-bundle-download
Action required