e0fb148fba377327dbcb2cfd1df8ac66961961ea
1217
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
|
|
e0fb148fba |
fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-a6c605ea7f
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 7s
CI (SIAX Cloud) / security (pull_request) Successful in 14s
masterplan-lock / check (push) Successful in 16s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 40s
CI (SIAX Cloud) / integration (pull_request) Successful in 9m48s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m3s
|
||
|
|
a6c605ea7f |
Merge pull request 'fix(recovery): restore 0pt source and isolate integration writes' (#539) from codex/operator-source-recovery-20261110 into main
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 9s
Security Scan (SIAX Cloud) / security (push) Successful in 16s
CI (SIAX Cloud) / security (push) Successful in 18s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m19s
CI (SIAX Cloud) / quality (push) Successful in 1m28s
Deploy to Coolify / deploy (push) Successful in 2m15s
CI (SIAX Cloud) / sonar (push) Successful in 2m17s
CI (SIAX Cloud) / integration (push) Successful in 9m46s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 8s
masterplan-lock / check (pull_request) Successful in 11s
CI (SIAX Cloud) / security (pull_request) Successful in 15s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 32s
CI (SIAX Cloud) / integration (pull_request) Successful in 9m47s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m7s
|
||
|
|
0cac0266e0 |
test(safety): require an isolated opt-in target for ST0RE integration
masterplan-lock / check (push) Successful in 6s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 4s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 9s
CI (SIAX Cloud) / security (pull_request) Successful in 16s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 17s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m13s
CI (SIAX Cloud) / integration (pull_request) Successful in 1m15s
|
||
|
|
3d2fc6f913 | fix(recovery): restore source removed by production documentation merge | ||
|
|
585bdd4b44 | docs(production): standardiserad produktionsberedskap och gap-analys | ||
|
|
a4189333af |
docs(production): standardiserad produktionsberedskap och gap-analys
Lägger docs/production-readiness.md och siax/production-gaps.json enligt SIAX Master Definition of Done. Underlag: git-, kod- och live-evidens 2026-11-11. Nivån är evidensbaserad, inte ett leveransgodkännande. |
||
|
|
fb072d47c7 |
docs(status): spegla STATUS.md i docs/ för produktionsaudit
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 15s
Security Scan (SIAX Cloud) / security (push) Successful in 19s
CI (SIAX Cloud) / integration (push) Failing after 37s
CI (SIAX Cloud) / security (push) Successful in 1m1s
CI (SIAX Cloud) / sonar (push) Successful in 1m10s
masterplan-lock / check (push) Successful in 1m3s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 2m8s
Deploy to Coolify / deploy (push) Successful in 2m39s
CI (SIAX Cloud) / quality (push) Successful in 10m12s
|
||
|
|
e7cfdf47f1 |
Merge pull request #536 (manually-merged)
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 14s
masterplan-lock / check (push) Successful in 22s
Security Scan (SIAX Cloud) / security (push) Successful in 22s
CI (SIAX Cloud) / security (push) Successful in 51s
CI (SIAX Cloud) / integration (push) Successful in 1m57s
CI (SIAX Cloud) / sonar (push) Successful in 2m21s
Deploy to Coolify / deploy (push) Successful in 3m5s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 2m53s
CI (SIAX Cloud) / quality (push) Successful in 10m45s
|
||
|
|
dccdfed9bd |
fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-925f5ca2fd
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 15s
CI (SIAX Cloud) / security (pull_request) Successful in 21s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 24s
masterplan-lock / check (push) Successful in 10s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 1m53s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m4s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m31s
|
||
|
|
925f5ca2fd |
Merge pull request #535
CI (SIAX Cloud) / security (push) Successful in 18s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 11s
masterplan-lock / check (push) Successful in 11s
Security Scan (SIAX Cloud) / security (push) Successful in 24s
CI (SIAX Cloud) / sonar (push) Successful in 1m44s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m35s
Deploy to Coolify / deploy (push) Successful in 1m40s
CI (SIAX Cloud) / integration (push) Successful in 10m31s
CI (SIAX Cloud) / quality (push) Successful in 12m23s
|
||
|
|
2ea4062d09 |
chore: adopt SIAX Golden Standard docs and configuration
masterplan-lock / check (push) Successful in 14s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 14s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 37s
CI (SIAX Cloud) / security (pull_request) Successful in 38s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 1m23s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m7s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m28s
siax-scaffold genererade saknade standardartefakter (arkitektur, säkerhet, ändringslogg, runbooks, CI, devcontainer, licens m.m.) ur repots faktiska filer. DOC-07 lämnas avsiktligt röd till en verklig restore bevisats. |
||
|
|
6ae98c7034 |
Merge pull request 'chore(doctor): undanta genererade artefakter och spegelprosa från REPO-01' (#534) from chore/doctor-exemptions-repo01 into main
masterplan-lock / check (push) Successful in 11s
CI (SIAX Cloud) / security (push) Successful in 48s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 58s
Security Scan (SIAX Cloud) / security (push) Successful in 25s
CI (SIAX Cloud) / sonar (push) Successful in 1m57s
CI (SIAX Cloud) / quality (push) Canceled after 2m26s
CI (SIAX Cloud) / integration (push) Canceled after 2m22s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 2m16s
Deploy to Coolify / deploy (push) Successful in 3m7s
|
||
|
|
54ff8a3958 | ci: re-trigger efter serveromstart (statusuppdatering avbröts) | ||
|
|
869218fb8b |
Merge pull request #533
Deploy to Coolify / deploy (push) Canceled after 0s
CI (SIAX Cloud) / quality (push) Canceled after 0s
CI (SIAX Cloud) / integration (push) Canceled after 0s
CI (SIAX Cloud) / security (push) Canceled after 0s
CI (SIAX Cloud) / sonar (push) Canceled after 0s
CI (SIAX Cloud) / Component conformance (blocking) (push) Canceled after 0s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Canceled after 0s
Security Scan (SIAX Cloud) / security (push) Canceled after 0s
masterplan-lock / check (push) Successful in 9s
|
||
|
|
1e79d0c4cf |
chore(doctor): exempt generated artifacts and mirror prose from REPO-01
masterplan-lock / check (push) Successful in 7s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 8s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 15s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 30s
CI (SIAX Cloud) / security (pull_request) Successful in 52s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m46s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m54s
Varför: REPO-01 (inga github.com-remotes eller -referenser i json/md) stod som BLOCK även efter att de felaktiga lokala github-remoterna tagits bort. De kvarvarande träffarna var av två slag: genererade artefakter (SBOM, release-artefakter, package-lock.json) som listar tredjepartsberoendens metadata, och dokumentationsprosa som antingen beskriver GitHub som read-only spegel av kanoniska git.siax.io, länkar tredjepartsprojekt, eller citerar GitHubs egna produkt-/inställningssidor i historiska driftsanteckningar. Ändring: ny .siax-doctor.json med två smala REPO-01-undantag — ett för de genererade artefakterna, ett för de namngivna dokumentationsfilerna — med motivering per kategori. Där en dokumentationslänk pekade på en SIAX-repo via GitHub-spegeln och raden inte handlade om spegeln i sig, är länken omskriven till kanoniska https://git.siax.io/. Inga genererade filer är redigerade. Verifiering: node packages/doctor/src/doctor.mjs --repo . ger REPO-01 PASS ("N träff(ar) undantagna via .siax-doctor.json"). |
||
|
|
72d5876d23 |
docs(policy): SIAX Agent Execution Policy i AGENTS.md + CLAUDE.md
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 10s
masterplan-lock / check (pull_request) Successful in 11s
CI (SIAX Cloud) / security (pull_request) Successful in 16s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 18s
CI (SIAX Cloud) / integration (pull_request) Successful in 1m17s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m52s
masterplan-lock / check (push) Successful in 5s
|
||
|
|
596ca3f90e |
docs(production): standardiserad produktionsberedskap och gap-analys
CI (SIAX Cloud) / security (push) Successful in 19s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 17s
Security Scan (SIAX Cloud) / security (push) Successful in 31s
CI (SIAX Cloud) / integration (push) Successful in 1m5s
CI (SIAX Cloud) / sonar (push) Successful in 1m10s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m29s
Deploy to Coolify / deploy (push) Successful in 1m35s
CI (SIAX Cloud) / quality (push) Successful in 12m2s
masterplan-lock / check (push) Successful in 6s
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 10s
masterplan-lock / check (pull_request) Successful in 10s
CI (SIAX Cloud) / security (pull_request) Successful in 18s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 21s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m1s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m35s
|
||
|
|
66a7e253eb |
docs(production): standardiserad produktionsberedskap och gap-analys
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 8s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 9s
masterplan-lock / check (push) Successful in 15s
CI (SIAX Cloud) / security (pull_request) Successful in 16s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 23s
CI (SIAX Cloud) / integration (pull_request) Successful in 9m59s
CI (SIAX Cloud) / quality (pull_request) Successful in 11m30s
Lägger docs/production-readiness.md och siax/production-gaps.json enligt SIAX Master Definition of Done. Underlag: git-, kod- och live-evidens 2026-11-09. Nivån är evidensbaserad, inte ett leveransgodkännande. |
||
|
|
a4e6d7d8e2 |
Merge pull request 'chore(manifest): registrera saknade surface-poster (surfaces-fasen)' (#530) from chore/surface-posts-20261110 into main
CI (SIAX Cloud) / security (push) Successful in 22s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 23s
masterplan-lock / check (push) Successful in 11s
Security Scan (SIAX Cloud) / security (push) Successful in 37s
CI (SIAX Cloud) / sonar (push) Successful in 1m23s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m45s
Deploy to Coolify / deploy (push) Successful in 3m0s
CI (SIAX Cloud) / quality (push) Canceled after 6m41s
CI (SIAX Cloud) / integration (push) Canceled after 6m39s
|
||
|
|
416d00fc46 |
chore(manifest): registrera saknade surface-poster (surfaces-fasen)
masterplan-lock / check (push) Successful in 10s
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 9s
CI (SIAX Cloud) / security (pull_request) Successful in 17s
masterplan-lock / check (pull_request) Successful in 25s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 35s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m56s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m18s
Varje capability deklarerar i `surfaces[]` vilka ytor den ska ha (api, cli, mcp, ui, job, sdk). Fram till nu saknades `siax.surface`-poster för många av dem, vilket gjorde `siax-doctor surfaces` röd över estaten. Denna commit lägger posterna. ÄRLIGHETSREGEL: status sätts till `live` ENDAST där exponeringen kan påvisas i repot — operationId finns i committad OpenAPI, i genererad SDK, eller i ett CLI-/MCP-paket. Övriga poster skrivs som `planned`: deklarationen finns kvar men posten påstår inte att ytan är byggd. Ingen yta har påhittats och ingen deklaration har tagits bort. |
||
|
|
d3b1964d3a |
feat(capabilities): registrera capability-ägare med verifierat kontrakt (#529)
masterplan-lock / check (push) Successful in 14s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 18s
CI (SIAX Cloud) / security (push) Successful in 26s
Security Scan (SIAX Cloud) / security (push) Successful in 24s
CI (SIAX Cloud) / sonar (push) Successful in 1m31s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m44s
Deploy to Coolify / deploy (push) Successful in 2m9s
CI (SIAX Cloud) / integration (push) Successful in 10m12s
CI (SIAX Cloud) / quality (push) Successful in 11m26s
|
||
|
|
59c0e008f5 |
Merge pull request #528
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 19s
Security Scan (SIAX Cloud) / security (push) Successful in 22s
CI (SIAX Cloud) / security (push) Successful in 24s
CI (SIAX Cloud) / sonar (push) Successful in 1m39s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m58s
Deploy to Coolify / deploy (push) Successful in 2m23s
CI (SIAX Cloud) / integration (push) Successful in 9m55s
CI (SIAX Cloud) / quality (push) Successful in 10m12s
masterplan-lock / check (push) Successful in 7s
|
||
|
|
20d66ea40d |
feat(capabilities): bind operationId for API-surface capability records
masterplan-lock / check (push) Successful in 8s
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 13s
masterplan-lock / check (pull_request) Successful in 14s
CI (SIAX Cloud) / security (pull_request) Successful in 26s
CI (SIAX Cloud) / integration (pull_request) Successful in 37s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 32s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m26s
Records with an api surface but no operationId cannot be attested against the implementation (doctor CAP-OPID-MISSING). Each operationId here is taken verbatim from this repo's own contract file and matches the capability one-to-one; no operationId was guessed. |
||
|
|
7ce87ffa01 |
Merge pull request #527
masterplan-lock / check (push) Successful in 6s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 13s
CI (SIAX Cloud) / security (push) Successful in 19s
Security Scan (SIAX Cloud) / security (push) Successful in 19s
CI (SIAX Cloud) / integration (push) Successful in 45s
CI (SIAX Cloud) / sonar (push) Successful in 1m28s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m35s
Deploy to Coolify / deploy (push) Successful in 1m44s
CI (SIAX Cloud) / quality (push) Successful in 10m24s
|
||
|
|
d81325f27c |
Merge pull request 'feat(auth): dual-accept CL0UD workload identity on the machine routes' (#525) from feat/workload-identity-dual-accept-20261108 into main
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 9s
CI (SIAX Cloud) / security (push) Successful in 14s
Security Scan (SIAX Cloud) / security (push) Successful in 31s
CI (SIAX Cloud) / sonar (push) Successful in 1m38s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m58s
Deploy to Coolify / deploy (push) Successful in 2m2s
CI (SIAX Cloud) / quality (push) Successful in 10m14s
CI (SIAX Cloud) / integration (push) Successful in 10m18s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 8s
masterplan-lock / check (push) Successful in 11s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 16s
CI (SIAX Cloud) / security (pull_request) Successful in 27s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 33s
CI (SIAX Cloud) / integration (pull_request) Successful in 9m58s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m43s
|
||
|
|
d40360aabc |
feat(auth): dual-accept CL0UD workload identity on the machine routes
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 7s
masterplan-lock / check (push) Successful in 7s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 13s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 17s
CI (SIAX Cloud) / security (pull_request) Successful in 18s
CI (SIAX Cloud) / integration (pull_request) Successful in 27s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m5s
The internal machine routes (`quality/bridge-run`, `canonical/facts`, `internal/evidence-outbox/dispatch`, `internal/er/candidates`, `search/definitions`) trusted a shared `X-Internal-Token` with NO tenant authority: middleware let it through without setting any verified tenant, so `assertTenantMatchesVerified` was a no-op and a caller-chosen `tenant_id` in the body was authoritative. This closes that gap while keeping the engine working during the transition to CL0UD workload tokens: - `src/auth/internal-service-tenant.ts` — the server-configured `INTERNAL_SERVICE_TENANTS` scope, a scope header that only middleware may set, and a parser that strips/ignores client values. - `src/auth/cl0ud-workload.ts` — a real `jose`/JWKS verifier for CL0UD workload JWTs (`iss`/`aud`/`exp`), deriving `tenant_id` and `capabilities` from verified claims only. Fail-closed when a token is presented but the issuer/JWKS/audience/tenant claim does not verify. - `middleware.ts` — strips every `x-0pt-verified-*` header on all forwarded paths. Legacy internal tokens get the single configured tenant as scope (an ambiguous multi-tenant list is refused with 401 instead of widened); a Bearer CL0UD workload token is verified and its claims become the verified tenant/subject/capabilities. - `src/http/tenant-guard.ts` — enforces the service scope on tenant-scoped writes (deny when the tenant is outside the scope) and adds `assertWorkloadCapabilities` for capability-scoped principals. - `quality/bridge-run` now calls `assertTenantMatchesVerified` like `canonical/facts` already did. Tests: `tests/auth/workload-identity-dual-accept.test.ts` (10 cases) covers forged-header stripping, ambiguous-scope refusal, wrong audience, missing tenant claim, cross-tenant denial and missing-capability denial. Real CL0UD provisioning (service accounts + published JWKS) is still required before a workload token exists in production; until then the legacy token path is the only one that authenticates, now tenant-scoped. |
||
|
|
c6a5102a2a |
fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-62517aca49
masterplan-lock / check (push) Successful in 6s
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / security (pull_request) Successful in 17s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 24s
masterplan-lock / check (pull_request) Successful in 29s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 38s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m27s
CI (SIAX Cloud) / integration (pull_request) Successful in 1m46s
|
||
|
|
62517aca49 |
Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#523) from fix/prod-restore-2026-09-29 into main
masterplan-lock / check (push) Successful in 6s
CI (SIAX Cloud) / Component conformance (blocking) (push) Failing after 10s
CI (SIAX Cloud) / security (push) Successful in 14s
Security Scan (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / quality (push) Successful in 42s
CI (SIAX Cloud) / sonar (push) Successful in 53s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 59s
Deploy to Coolify / deploy (push) Successful in 49s
CI (SIAX Cloud) / integration (push) Successful in 9m56s
|
||
|
|
db26daa979 |
Merge branch 'main' into fix/prod-restore-2026-09-29
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 4s
masterplan-lock / check (pull_request) Successful in 5s
Security Scan (SIAX Cloud) / security (pull_request) Failing after 20s
CI (SIAX Cloud) / security (pull_request) Successful in 31s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 31s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m7s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m27s
|
||
|
|
c532cedb5e |
Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (38ae3ddf0b)' (#522) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 8s
CI (SIAX Cloud) / security (push) Successful in 15s
Security Scan (SIAX Cloud) / security (push) Successful in 15s
CI (SIAX Cloud) / quality (push) Canceled after 16s
CI (SIAX Cloud) / integration (push) Canceled after 15s
CI (SIAX Cloud) / sonar (push) Canceled after 15s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 59s
Deploy to Coolify / deploy (push) Successful in 1m12s
|
||
|
|
40202178a3 |
fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-38ae3ddf0b
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 4s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 15s
CI (SIAX Cloud) / security (pull_request) Failing after 18s
masterplan-lock / check (pull_request) Failing after 18s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 25s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m19s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m27s
|
||
|
|
38ae3ddf0b |
Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#521) from fix/prod-restore-2026-09-29 into main
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 8s
CI (SIAX Cloud) / quality (push) Failing after 9s
CI (SIAX Cloud) / security (push) Failing after 9s
CI (SIAX Cloud) / sonar (push) Failing after 9s
Security Scan (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / integration (push) Successful in 1m6s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 59s
Deploy to Coolify / deploy (push) Successful in 1m23s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 4s
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 13s
CI (SIAX Cloud) / security (pull_request) Successful in 17s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 19s
CI (SIAX Cloud) / integration (pull_request) Successful in 1m12s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m27s
|
||
|
|
a7a4295043 |
Merge branch 'main' into fix/prod-restore-2026-09-29
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 5s
masterplan-lock / check (pull_request) Successful in 4s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 15s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Failing after 20s
CI (SIAX Cloud) / quality (pull_request) Failing after 20s
CI (SIAX Cloud) / security (pull_request) Failing after 20s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m18s
|
||
|
|
f1d47ffb2e |
Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (b1ae910d64)' (#520) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 8s
CI (SIAX Cloud) / quality (push) Canceled after 15s
CI (SIAX Cloud) / integration (push) Canceled after 14s
CI (SIAX Cloud) / security (push) Canceled after 14s
CI (SIAX Cloud) / sonar (push) Canceled after 14s
Security Scan (SIAX Cloud) / security (push) Canceled after 14s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m5s
Deploy to Coolify / deploy (push) Successful in 1m20s
|
||
|
|
8e7c228bd2 |
fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-b1ae910d64
masterplan-lock / check (push) Successful in 4s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 4s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 15s
CI (SIAX Cloud) / security (pull_request) Successful in 16s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 17s
CI (SIAX Cloud) / integration (pull_request) Successful in 42s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m18s
|
||
|
|
b1ae910d64 |
Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#519) from fix/prod-restore-2026-09-29 into main
CI (SIAX Cloud) / security (push) Failing after 13s
CI (SIAX Cloud) / sonar (push) Failing after 13s
CI (SIAX Cloud) / Component conformance (blocking) (push) Failing after 12s
CI (SIAX Cloud) / integration (push) Failing after 20s
Security Scan (SIAX Cloud) / security (push) Failing after 21s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 1m32s
Deploy to Coolify / deploy (push) Failing after 21s
CI (SIAX Cloud) / quality (push) Successful in 10m31s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 6s
CI (SIAX Cloud) / security (pull_request) Successful in 15s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 15s
masterplan-lock / check (push) Failing after 20s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 37s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m8s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m34s
|
||
|
|
91f270ea19 |
Merge branch 'main' into fix/prod-restore-2026-09-29
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / integration (pull_request) Failing after 1s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Failing after 1s
CI (SIAX Cloud) / security (pull_request) Failing after 1s
masterplan-lock / check (push) Successful in 4s
masterplan-lock / check (pull_request) Successful in 10s
Security Scan (SIAX Cloud) / security (pull_request) Failing after 20s
CI (SIAX Cloud) / quality (pull_request) Successful in 57s
|
||
|
|
ac3a95f320 |
Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (419c2d3f18)' (#518) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 4s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 8s
CI (SIAX Cloud) / Component conformance (blocking) (push) Failing after 8s
Security Scan (SIAX Cloud) / security (push) Failing after 8s
CI (SIAX Cloud) / quality (push) Failing after 9s
CI (SIAX Cloud) / security (push) Failing after 15s
CI (SIAX Cloud) / integration (push) Canceled after 16s
CI (SIAX Cloud) / sonar (push) Canceled after 15s
Deploy to Coolify / deploy (push) Failing after 1m30s
|
||
|
|
fab0a53573 |
fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-419c2d3f18
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 4s
masterplan-lock / check (pull_request) Successful in 4s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 7s
CI (SIAX Cloud) / security (pull_request) Successful in 15s
CI (SIAX Cloud) / integration (pull_request) Successful in 27s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 32s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m3s
|
||
|
|
419c2d3f18 |
Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#517) from fix/prod-restore-2026-09-29 into main
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 11s
Security Scan (SIAX Cloud) / security (push) Successful in 23s
CI (SIAX Cloud) / security (push) Successful in 25s
CI (SIAX Cloud) / sonar (push) Successful in 1m11s
CI (SIAX Cloud) / integration (push) Successful in 1m11s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 2m47s
CI (SIAX Cloud) / quality (push) Successful in 10m9s
Deploy to Coolify / deploy (push) Failing after 10m31s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 8s
masterplan-lock / check (pull_request) Successful in 14s
CI (SIAX Cloud) / security (pull_request) Successful in 27s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 41s
CI (SIAX Cloud) / integration (pull_request) Successful in 1m20s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m4s
|
||
|
|
e96e015722 |
Merge branch 'main' into fix/prod-restore-2026-09-29
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 3s
masterplan-lock / check (push) Successful in 7s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 14s
CI (SIAX Cloud) / security (pull_request) Successful in 17s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 54s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m11s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m18s
|
||
|
|
344decd285 |
Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (ebfa17028d)' (#516) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 10s
CI (SIAX Cloud) / quality (push) Canceled after 14s
CI (SIAX Cloud) / integration (push) Canceled after 14s
CI (SIAX Cloud) / security (push) Canceled after 14s
CI (SIAX Cloud) / sonar (push) Canceled after 13s
Security Scan (SIAX Cloud) / security (push) Canceled after 13s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m45s
Deploy to Coolify / deploy (push) Successful in 1m52s
|
||
|
|
32cd714126 |
fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-ebfa17028d
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 3s
masterplan-lock / check (push) Successful in 6s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 7s
CI (SIAX Cloud) / security (pull_request) Successful in 25s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 40s
CI (SIAX Cloud) / quality (pull_request) Successful in 45s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m35s
|
||
|
|
ebfa17028d |
Merge pull request 'docs(identity): 0pt workload identity — målbild, design och blockerare' (#502) from docs/workload-identity-20261107 into main
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 17s
CI (SIAX Cloud) / security (push) Successful in 23s
Security Scan (SIAX Cloud) / security (push) Successful in 21s
CI (SIAX Cloud) / sonar (push) Successful in 1m33s
CI (SIAX Cloud) / quality (push) Successful in 1m43s
Deploy to Coolify / deploy (push) Successful in 2m41s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 2m42s
CI (SIAX Cloud) / integration (push) Successful in 9m56s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 5s
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 8s
CI (SIAX Cloud) / security (pull_request) Successful in 14s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 15s
CI (SIAX Cloud) / integration (pull_request) Successful in 9m47s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m33s
|
||
|
|
5a8d26eee6 |
Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#515) from fix/prod-restore-2026-09-29 into main
masterplan-lock / check (push) Successful in 6s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 8s
CI (SIAX Cloud) / security (push) Successful in 15s
Security Scan (SIAX Cloud) / security (push) Successful in 15s
CI (SIAX Cloud) / sonar (push) Successful in 1m47s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m20s
Deploy to Coolify / deploy (push) Successful in 1m29s
CI (SIAX Cloud) / integration (push) Successful in 9m49s
CI (SIAX Cloud) / quality (push) Successful in 10m22s
|
||
|
|
d301f6e0cc |
Merge branch 'main' into fix/prod-restore-2026-09-29
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 4s
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 17s
CI (SIAX Cloud) / security (pull_request) Successful in 21s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 21s
CI (SIAX Cloud) / integration (pull_request) Successful in 43s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m8s
|
||
|
|
85de12fdfe |
Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (6b57f7cb9d)' (#514) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 4s
CI (SIAX Cloud) / quality (push) Canceled after 16s
CI (SIAX Cloud) / integration (push) Canceled after 16s
CI (SIAX Cloud) / security (push) Canceled after 16s
CI (SIAX Cloud) / sonar (push) Canceled after 16s
CI (SIAX Cloud) / Component conformance (blocking) (push) Canceled after 16s
Security Scan (SIAX Cloud) / security (push) Canceled after 17s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m24s
Deploy to Coolify / deploy (push) Successful in 1m29s
|
||
|
|
966a36f898 |
fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-6b57f7cb9d
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 5s
masterplan-lock / check (pull_request) Successful in 6s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 6s
CI (SIAX Cloud) / security (pull_request) Successful in 14s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 39s
CI (SIAX Cloud) / integration (pull_request) Successful in 9m49s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m0s
|
||
|
|
6b57f7cb9d |
Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#513) from fix/prod-restore-2026-09-29 into main
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 8s
CI (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / integration (push) Successful in 28s
CI (SIAX Cloud) / sonar (push) Successful in 1m1s
Security Scan (SIAX Cloud) / security (push) Successful in 1m17s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m26s
Deploy to Coolify / deploy (push) Successful in 1m11s
CI (SIAX Cloud) / quality (push) Successful in 10m3s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 4s
masterplan-lock / check (pull_request) Successful in 8s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 9s
CI (SIAX Cloud) / security (pull_request) Successful in 16s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 17s
CI (SIAX Cloud) / integration (pull_request) Successful in 9m48s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m25s
|
||
|
|
c15b4088c3 |
Merge branch 'main' into fix/prod-restore-2026-09-29
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 5s
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 9s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 22s
CI (SIAX Cloud) / security (pull_request) Successful in 43s
CI (SIAX Cloud) / integration (pull_request) Successful in 9m47s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m3s
|