gstack

mirror of https://github.com/garrytan/gstack.git synced 2026-09-09 22:48:57 +02:00

Files

T

Garry TanandClaude Fable 5 716196bba5 fix(ci): OSV suppression config actually loads — explicit global --config + expiring, reasoned ignores

The ignore file was inert from v1.65.0.0: OSV-Scanner only auto-discovers
configs named osv-scanner.toml (no leading dot) and applies them
per-directory, so the root config never covered lib/diagram-render/bun.lock
either way. The workflow now passes --config=.osv-scanner.toml globally.
Every IgnoredVulns entry carries a reason with an upgrade trigger and an
ignoreUntil expiry (~90 days) so suppressions must be re-justified. A wiring
test pins flag ↔ filename ↔ entry hygiene so the file can never silently go
inert again.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-31 20:49:05 +00:00

actionlint.yml

v1.74.0.0 test/CI overhaul: green means green, suites restructured for speed (#2721 )

2026-08-29 09:06:54 -07:00

ci-image.yml

v1.77.0.0 feat: test-infrastructure overhaul wave 1 — matrix deletion, flake telemetry, sync-spawn wedge class extinct (#2746 )

2026-08-31 08:55:30 -07:00

dependency-review.yml

v1.74.0.0 test/CI overhaul: green means green, suites restructured for speed (#2721 )

2026-08-29 09:06:54 -07:00

evals-periodic.yml

v1.77.0.0 feat: test-infrastructure overhaul wave 1 — matrix deletion, flake telemetry, sync-spawn wedge class extinct (#2746 )