admin/accounted
3
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix(ci): kanoniskt security-workflow som kan bli grönt #30

Open
admin wants to merge 4 commits from fix/security-canonical-workflow into main
pull from: fix/security-canonical-workflow
merge into: :main
Conversation 0 Commits 4 Files Changed 3
+121 -18
admin commented 2026-11-10 12:43:28 +00:00
Owner
Copy Link
Copy Source

Mekanisk del av den estate-vida security-gate-rättningen. Se commit-bodyn för rotorsakerna (volymmontering, Semgrep /src, pinnade actions, npm/pnpm-härdning).

Mekanisk del av den estate-vida security-gate-rättningen. Se commit-bodyn för rotorsakerna (volymmontering, Semgrep /src, pinnade actions, npm/pnpm-härdning).
admin added 1 commit 2026-11-10 12:43:28 +00:00
fix(ci): kanoniskt security-workflow (volymscan, pinnade actions, npm/pnpm-härdning)
masterplan-lock / check (pull_request) Successful in 5s
Details
masterplan-lock / check (push) Successful in 10s
Details
security / scan (pull_request) Failing after 4m44s
Details
229b9a0722 
Samma rotorsaker som fällde HARD0 och b00k: scannrarna monterade en
sökväg som är tom inuti runner-containern (gitleaks rapporterade falskt
"no leaks found", OSV gav 128 "No package sources found"), Semgreps
wrapper kräver koden på /src, och actions/@v4 är en muterbar tag.

Trädet kopieras nu till en namngiven volym som alla scannrar monterar;
checkout/setup-node är pinnade till fasta SHA; OSV hoppar över repos utan
låsfil och läser osv-scanner.toml när den finns; .npmrc och
pnpm-workspace.yaml har fått min-release-age/trustPolicy enligt Semgreps
p/ci-regler.
CODEOWNERS rules requested review from sax3l 2026-11-10 12:43:28 +00:00
admin added 1 commit 2026-11-10 14:54:15 +00:00
fix(ci): uppdatera security-workflow till kanonisk mall (volymscan + låsfils-guard)
masterplan-lock / check (push) Successful in 4s
Details
masterplan-lock / check (pull_request) Successful in 4s
Details
security / scan (pull_request) Failing after 28s
Details
a13f84e2dd
admin added 1 commit 2026-11-10 15:23:39 +00:00
fix(ci): uppdatera security-workflow till kanonisk mall (volymscan + låsfils-guard)
masterplan-lock / check (push) Successful in 18s
Details
masterplan-lock / check (pull_request) Successful in 26s
Details
security / scan (pull_request) Failing after 3m8s
Details
69ec593bea
admin added 1 commit 2026-11-10 15:35:57 +00:00
fix(ci): allowlista verifierade gitleaks-falska-positiver
masterplan-lock / check (pull_request) Successful in 9s
Details
masterplan-lock / check (push) Successful in 23s
Details
security / scan (pull_request) Failing after 2m11s
Details
bfa8d5dffd 
Dokumentationskodexempel, testfixtures, publika register och .env-exempel;
varje post granskad mot filens innehåll. Inga riktiga hemligheter.
Some optional checks failed
masterplan-lock / check (pull_request) Successful in 9s
Required
Details
masterplan-lock / check (push) Successful in 23s
Required
Details
security / scan (pull_request) Failing after 2m11s
Details
This pull request doesn't have enough required approvals yet. 0 of 1 approvals granted from users or teams on the allowlist.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin fix/security-canonical-workflow:fix/security-canonical-workflow
git checkout fix/security-canonical-workflow
Sign in to join this conversation.
Reviewers
No Reviewers
sax3l
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
siax-bot siax-ci siax-healer (siax-healer (CI self-healing agent)) admin (Simon Axelsson)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: admin/accounted#30