Garry Tanandcapy-ai[bot] 3bfe5667fb v1.91.378.0 fix(cso): pin scout-sbom-indexer source to 1.24.0, refuse floating source tags (GST-495) (#3699) ...

* fix(cso): pin the SBOM generator source to release tag 1.24.0 and refuse floating source tags (GST-495)

Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

* fix: pre-landing review fixes (exact release tags; two-part only for postgresql)

Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

* docs(cso): source tags must name an exact release

Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

* docs(cso): the exact-release rule covers every pinned family

Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

---------

Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

2026-10-31 18:12:53 +00:00

..

images

v1.91.378.0 fix(cso): pin scout-sbom-indexer source to 1.24.0, refuse floating source tags (GST-495) (#3699)

2026-10-31 18:12:53 +00:00

scanner-images

Promote qualified CSO scanner catalog (#3042)

2026-10-05 21:42:48 +00:00

.prettierrc.json

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

admission.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

bounded-file.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

cache.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

cli.ts

v1.91.159.0 security: gstack's Bun entry points ignore the audited repo's .env and bunfig.toml (S1) (#3312)

2026-10-20 00:24:28 +00:00

contracts.ts

v1.91.154.0 fix(cso): safe-status sets, withheld credential history, ASSERTION_FAILED, Rails read-only verify (#3302)

2026-10-19 21:11:16 +00:00

docker.ts

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

history.ts

v1.91.154.0 fix(cso): safe-status sets, withheld credential history, ASSERTION_FAILED, Rails read-only verify (#3302)

2026-10-19 21:11:16 +00:00

image-provisioning.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

launcher-windows.c

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

launcher.c

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

preparation-container.ts

v1.91.159.0 security: gstack's Bun entry points ignore the audited repo's .env and bunfig.toml (S1) (#3312)

2026-10-20 00:24:28 +00:00

preparation-docker.ts

v1.91.154.0 fix(cso): safe-status sets, withheld credential history, ASSERTION_FAILED, Rails read-only verify (#3302)

2026-10-19 21:11:16 +00:00

preparation-executor.ts

v1.91.36.0 fix(cso): Python and Rails repairs replay, Rails verification fits its budget, killed attempts leave no scratch (#3074)

2026-10-08 06:06:43 +00:00

preparation.ts

fix(cso): report a go.mod repository as Go (unsupported), not Python (#3263) (#3378)

2026-10-25 07:03:51 +00:00

process-identity.ts

v1.91.16.0 fix: safe installs and upgrades, skills start everywhere, truthful completion (parallel wave) (#3014)

2026-10-03 07:54:09 -07:00

process.ts

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

publish-lock.c

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

runtime-catalog.json

v1.91.181.0 Promote qualified CSO runtime catalog (#3343)

2026-10-23 00:26:19 +00:00

runtime-catalog.ts

v1.91.25.0 feat(cso): private two-architecture release scoring + self-checking runtime release gates (#3036)

2026-10-04 21:47:21 -07:00

scanner-catalog.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

scanner-executor.ts

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

scanners.ts

v1.91.22.0 feat(cso): reviewed, attested scanner build inputs + fixes so scanner qualification can pass (#3035)

2026-10-04 17:50:26 -07:00

snapshot.ts

v1.91.154.0 fix(cso): safe-status sets, withheld credential history, ASSERTION_FAILED, Rails read-only verify (#3302)

2026-10-19 21:11:16 +00:00

state.ts

v1.91.124.0 feat(cso): helper run clock (remainingSeconds), /cso time discipline, content-free producer tool timeline (#3242)

2026-10-17 17:19:52 +00:00

verification.ts

v1.91.154.0 fix(cso): safe-status sets, withheld credential history, ASSERTION_FAILED, Rails read-only verify (#3302)

2026-10-19 21:11:16 +00:00

verifier.ts

v1.91.159.0 security: gstack's Bun entry points ignore the audited repo's .env and bunfig.toml (S1) (#3312)

2026-10-20 00:24:28 +00:00

watchdog.c

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

windows-docker.ts

v1.91.32.0 fix: Codex works from zsh, free text never enters shell commands, honest failures (#3057)

2026-10-06 23:42:19 +00:00

witness.ts

v1.91.36.0 fix(cso): Python and Rails repairs replay, Rails verification fits its budget, killed attempts leave no scratch (#3074)

2026-10-08 06:06:43 +00:00