Repository navigation

chore: refresh org SBOM inventory - #1678

Draft

opencode-agent[bot] wants to merge 1074 commits into

mainfrom

automation/sbom-inventory

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 27, 2026
Commits on Sep 28, 2026
- fix(strix): require completed PR reports to name changed source (#2474)
  seonghobae
  authored
  d0ac747
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  7094660
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  df7cb2a
- test(strix): align PR fixtures with scoped report contract (#2475)
  seonghobae
  authored
  480c196
- fix(ci): continue Strix runtime transport failures on same PR head (#2479)
  seonghobae
  authored
  1d908b7
- fix(ci): prefetch locked Cargo fixtures for offline coverage (#2478)
  seonghobae
  authored
  3295c25
- fix(ci): reclaim per-run OpenCode coverage resources
  seonghobae
  committed
  a40062f
- fix(ci): scope coverage build cleanup to each attempt
  seonghobae
  committed
  1769d25
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  9b2abb7
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  3fa4640
Commits on Sep 29, 2026
- fix(pingora): bound decoded PNG size separately from the HTTP response cap (#2498)
  
  seonghobae
  and
  claude
  authored
  f458d31
- fix(ci): rebuild the review sidecar venv on persistent runner temp
  
  seonghobae
  and
  claude
  committed
  a17db78
- Merge pull request #2507 from ContextualWisdomLab/seonghobae/opencode-verdict-rca-20260929
  seonghobae
  authored
  60cc284
- Merge remote-tracking branch 'origin/main' into adopt/2491
  seonghobae
  committed
  cdeab4b
- Merge pull request #2491 from ContextualWisdomLab/fix/coverage-runner-cleanup-20260928
  seonghobae
  authored
  17ddef0
- fix(ci): disable Strix telemetry in the gate child environment
  
  Seongho Bae
  and
  claude
  committed
  dea713b
- fix(ci): ask Strix to name reviewed files so clean PR scans can attest scope
  
  Seongho Bae
  and
  claude
  committed
  a5233e8
- fix(ci): run the central fix-scheduler dispatch on the control runners
  
  seonghobae
  and
  claude
  committed
  9a94217
- Merge pull request #2512 from ContextualWisdomLab/seonghobae/fix-scheduler-control-runner
  seonghobae
  authored
  137ccea
- feat(ops): add an OpenCode dispatch-queue priority runbook
  
  seonghobae
  and
  claude
  committed
  d0459e1
- Merge pull request #2513 from ContextualWisdomLab/seonghobae/opencode-queue-priority-runbook
  seonghobae
  authored
  38f0630
- Merge branch 'main' into seonghobae/strix-telemetry-off-20260929
  seonghobae
  authored
  483c67a
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  ca877eb
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  9cebf50
- fix(ci): do not scan an empty CodeQL inventory as actions
  
  seonghobae
  and
  claude
  committed
  2e28521
- fix(ci): expose runner cargo and reclaim stale coverage images
  
  seonghobae
  and
  claude
  committed
  808299e
- Merge pull request #2514 from ContextualWisdomLab/seonghobae/coverage-cargo-path-docker-hygiene
  seonghobae
  authored
  38eff13
- fix(ci): prune stale PR-head worktree registrations before review
  
  seonghobae
  and
  claude
  committed
  a5cefcd
- Merge pull request #2516 from ContextualWisdomLab/seonghobae/opencode-worktree-prune
  seonghobae
  authored
  7bfb51e
- fix(ci): sweep stale root-owned coverage workspaces on the OpenCode runner
  
  seonghobae
  and
  claude
  committed
  3958fc0
- Merge pull request #2517 from ContextualWisdomLab/seonghobae/coverage-workspace-reclaim
  seonghobae
  authored
  2639d7c
- fix(strix): record findings on packages the repository never uses as unverified
  
  seonghobae
  and
  claude
  committed
  e600e14
- Merge pull request #2518 from ContextualWisdomLab/seonghobae/strix-manifest-filter
  seonghobae
  authored
  1ef0a7a
- fix(ci): skip draft pull requests before assigning a control runner
  
  seonghobae
  and
  claude
  committed
  e58dc43
- Merge pull request #2519 from ContextualWisdomLab/seonghobae/draft-pr-runner-guard
  seonghobae
  authored
  8a70191
- fix(ci): keep required-workflow-bootstrap free of an if condition
  
  seonghobae
  and
  claude
  committed
  23f3ea7
- Merge pull request #2522 from ContextualWisdomLab/seonghobae/bootstrap-no-if
  seonghobae
  authored
  479a60b
- fix(strix): accept PR-scope directories that contain a changed file
  
  seonghobae
  and
  claude
  committed
  788baea
- Merge pull request #2523 from ContextualWisdomLab/seonghobae/strix-report-scope-dirs
  seonghobae
  authored
  9ca2353
- fix(coverage): install the base-pinned Rust release in the coverage image
  
  seonghobae
  and
  claude
  committed
  a1c7958
- fix(coverage): resolve the base Rust pin next to the image build
  
  seonghobae
  and
  claude
  committed
  0489218
- fix(coverage): place the built PyO3 extension where pytest imports it
  
  seonghobae
  and
  claude
  committed
  2c90c58
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  6e3bd18
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  568e32d
- fix(sidecar): fail with a named cause when the runner disk is full
  
  seonghobae
  and
  claude
  committed
  a8a6ab4
- Merge pull request #2524 from ContextualWisdomLab/seonghobae/coverage-rust-toolchain
  seonghobae
  authored
  00e84cf
- fix(sidecar): warn on low runner disk and stop only when the venv cannot fit
  
  seonghobae
  and
  claude
  committed
  b9393d4
- fix(coverage): disclose Rust coverage timeouts as not measured
  
  seonghobae
  and
  claude
  committed
  4d1e11e
Commits on Sep 30, 2026
- fix(ci): suppress the reviewed maturin asset urlopen finding
  
  seonghobae
  and
  claude
  committed
  6dabb8c
- Merge pull request #2528 from ContextualWisdomLab/seonghobae/semgrep-maturin-asset-urlopen
  seonghobae
  authored
  bf053a2
- Merge pull request #2525 from ContextualWisdomLab/seonghobae/sidecar-disk-free-guard
  seonghobae
  authored
  e295530
- docs(changelog): attribute the fast-mlsirm coverage failure to pytest collection
  
  seonghobae
  and
  claude
  committed
  28b3c78
- Merge pull request #2511 from ContextualWisdomLab/seonghobae/strix-telemetry-off-20260929
  seonghobae
  authored
  9e86404
- Merge remote-tracking branch 'origin/main' into seonghobae/rust-coverage-timeout-not-measured
  seonghobae
  committed
  491495a
- Merge pull request #2529 from ContextualWisdomLab/seonghobae/rust-coverage-timeout-not-measured
  seonghobae
  authored
  37b1024
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  a7a351c
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  f879b4b
- test(security): require patched Strix and Rust fixture locks
  seonghobae
  committed
  cd84d88
- fix(security): refresh shared PyJWT and PyO3 locks
  seonghobae
  committed
  1ca4b94
- test(security): reject duplicate vulnerable dependency locks
  seonghobae
  committed
  02c70d5
- test(security): normalize requirement extras
  seonghobae
  committed
  d1aa365
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  7d5b517
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  a0658a0
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  430e703
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  1c562e5
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  f1b8603
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  a3f4ce5
- fix(security): pin patched urllib3 for pip audit
  seonghobae
  committed
  5e807bd
- fix(security): pin patched urllib3 for Strix
  seonghobae
  committed
  bb3bcad
- build(security): regenerate pip audit lock
  seonghobae
  committed
  109b542
- build(security): regenerate Strix lock
  seonghobae
  committed
  8dba299
- test(security): bind patched urllib3 locks
  seonghobae
  committed
  165b6fe
- docs(security): record urllib3 lock repair
  seonghobae
  committed
  0d5a2c3
- docs(doctoring): trace urllib3 CVE repair
  seonghobae
  committed
  e65f595
- docs(gap): track shared urllib3 closure
  seonghobae
  committed
  dde3ea7
- fix(security): advance PyJWT beyond parser DoS
  seonghobae
  committed
  9b4258d
- fix(security): advance shared PyJWT lock to 2.15.0
  seonghobae
  committed
  e5359ba
- merge: integrate concurrent PyJWT security repair
  seonghobae
  committed
  516471f
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  88da160
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  b81cc2a
- fix(security): patch document reader transitives
  seonghobae
  committed
  08d8506
- test(security): require Noema transitive source owner
  seonghobae
  committed
  29ebc1e
- fix(security): own Noema transitive overrides
  seonghobae
  committed
  91f20d2
- merge(security): integrate shared dependency prerequisite
  seonghobae
  committed
  93433af
- fix(security): narrow transitive floor and scan nested locks
  seonghobae
  committed
  9a4af5e
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  be74ad4
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  f081746
Commits on Oct 1, 2026
- fix(security): patch shared Strix LiteLLM lock
  seonghobae
  committed
  fe879f7
- fix(security): replace suppressed maturin URL opener
  seonghobae
  committed
  eb05a35
- docs(security): bind Gap baseline to exact-head evidence
  seonghobae
  committed
  94c48f9
- docs(security): record exact-head admission state
  seonghobae
  committed
  8f7a674
- merge(security): integrate bounded maturin downloader
  seonghobae
  committed
  e33d97d
- fix(security): replace audited HTTPSConnection downloader
  seonghobae
  committed
  eede925
- docs(security): bind Maturin SAST RCA to exact evidence
  seonghobae
  committed
  a5ddcfc
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  6faef45
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  402b75d
- fix(docs): restore complete gap baseline after binary corruption
  seonghobae
  committed
  f42da78
- docs(security): record bounded Maturin SAST closure
  seonghobae
  committed
  c48981d
- fix(security): disable ambient release proxies
  seonghobae
  committed
  21467ef
- merge(security): integrate proxy-free downloader with live evidence
  seonghobae
  committed
  7900ba4
- Merge security baseline owner into SBOM inventory
  seonghobae
  committed
  b965111
- fix(ci): diff agent quality against live base
  seonghobae
  committed
  ba00ac0
- merge(ci): integrate shared security owner into live-base repair
  seonghobae
  committed
  617212f
- merge(ci): stack live-base quality owner into SBOM inventory
  seonghobae
  committed
  44d6ee0
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  4c7fb99
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  7598436
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  7423def
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  26f87b4
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  c6a325b
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  4f75f77
Commits on Oct 2, 2026
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  24986b0
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  1da7377
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  084225a
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  4f377d7
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  d912b71
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  e6ddfc2
Commits on Oct 6, 2026
- ci: run billing-locked central schedules on existing self-hosted runners
  seonghobae
  committed
  9a1aa12
- Merge pull request #2586 from ContextualWisdomLab/infra/hosted-schedulers-to-self-hosted-20261006
  seonghobae
  authored
  d165b4e
- ci: attach trusted schedules to the MCP runner group
  seonghobae
  committed
  2161ef0
- Merge pull request #2590 from ContextualWisdomLab/infra/mcp-expression-runs-on-20261006
  seonghobae
  authored
  7554587
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  b8c8c98
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  0255a05
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  544e452
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  81c2edb
Commits on Oct 7, 2026
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  dd561bc
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  92a7700
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  4bd80e0
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  00ad5e3
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  d858708
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  01937c8
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  74aa562
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  be09ff2
Commits on Oct 8, 2026
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  4a258a1
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  2a01610
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  27a11dd
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  94c6b4a
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  f007e73
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  23e7ed6
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  fc65349
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  3197434
Commits on Oct 9, 2026
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  d5432b2
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  f97fbba
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  036f597
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  bcb2070
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  e3e3e3f
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  f85f3b5
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  401afce
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  bd4f03c
Commits on Oct 10, 2026
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  1473dea
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  1b3eea4
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  ede72cb
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  9950d75
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  d2493e0
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  691b57f
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  b6c1b42
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  d6c1d62
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  23562c4
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  bb74afb
Commits on Oct 11, 2026
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  049d0c6
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  07309e0
- chore: refresh org SBOM inventory
  cwl-sbom-inventory[bot]
  committed
  1943082
- chore: preserve SBOM inventory publication lineage
  cwl-sbom-inventory[bot]
  committed
  a5c4b38

Commits

Commits on Sep 27, 2026

Commits on Sep 28, 2026

Commits on Sep 29, 2026

Commits on Sep 30, 2026