All workflows

Workflow runs

• fix(security): Filesystem grants derived from the inner command must not follow interpreter or symlink content that lives where the confined process can write, and each derived directory needs a bounded taint decision.

  requires action with the application:
  CI#924:Pull request#446openedbygithub-actions[bot]Bot
  fix/security-20261031-080207-scheduled-ok-plan-03

  Oct 31, 2026Action required
  More actions for workflow run 924

• fix(security): Route construction for approved skills at launch must stamp the same mount ownership field the serve-mode installer sets, so the existing ownership guard can protect a running skill's route from replacement.

  requires action with the application:
  CI#923:Pull request#445openedbygithub-actions[bot]Bot
  fix/security-20261031-080207-scheduled-ok-plan-01

  Oct 31, 2026Action required
  More actions for workflow run 923

• fix(security): The Linux kernel port grants are enforced with no address dimension, so the security guarantee, the launch-time audit notice, and the accepted-risk record must state the residual reach of every granted port instead of implying loopback-only mediation.

  requires action with the application:
  docs-pages#188:Pull request#444openedbygithub-actions[bot]Bot
  fix/security-20261031-080207-scheduled-ok-plan-02

  Oct 31, 2026Action required
  More actions for workflow run 188

• fix(security): The Linux kernel port grants are enforced with no address dimension, so the security guarantee, the launch-time audit notice, and the accepted-risk record must state the residual reach of every granted port instead of implying loopback-only mediation.

  requires action with the application:
  CI#922:Pull request#444openedbygithub-actions[bot]Bot
  fix/security-20261031-080207-scheduled-ok-plan-02

  Oct 31, 2026Action required
  More actions for workflow run 922

• Security Remediate

  completed successfully:
  Security Remediate#17:completedbynhuelstng
  Oct 31, 20261h 6m 30s
  More actions for workflow run 17

• E2E: full

  completed successfully:
  E2E: full#172:Scheduled
  main

  Oct 31, 20269m 0s
  More actions for workflow run 172

• E2E: drift

  completed successfully:
  E2E: drift#41:Scheduled
  main

  Oct 31, 20265m 50s
  More actions for workflow run 41

• Security Scan

  completed successfully:
  Security Scan#32:Scheduled
  main

  Oct 31, 202647m 12s
  More actions for workflow run 32

• Security Finalize

  completed successfully:
  Security Finalize#44:Scheduled
  main

  Oct 31, 202614s
  More actions for workflow run 44

• fix(sandbox): point zsh TMPPREFIX into TMPDIR on macOS

  completed successfully:
  CI#921:Pull request#443openedbyNoRiceToday
  fix/442-zsh-tmpprefix-2

  Oct 30, 20265m 9s
  More actions for workflow run 921

• fix(sandbox): point zsh TMPPREFIX into TMPDIR on macOS

  completed successfully:
  docs-pages#187:Pull request#443openedbyNoRiceToday
  fix/442-zsh-tmpprefix-2

  Oct 30, 20261m 42s
  More actions for workflow run 187

• Security Finalize

  completed successfully:
  Security Finalize#43:Scheduled
  main

  Oct 30, 202614s
  More actions for workflow run 43

• feat(start): add --skip-unregistered to launch despite unregistered skills

  completed successfully:
  docs-pages#186:Pull request#436synchronizebynhuelstng
  feat/skip-unregistered-skills

  Oct 29, 20261m 30s
  More actions for workflow run 186

• feat(start): add --skip-unregistered to launch despite unregistered skills

  failed:
  CI#920:Pull request#436synchronizebynhuelstng
  feat/skip-unregistered-skills

  Oct 29, 202610m 10s
  More actions for workflow run 920

• fix(cli): keep OpenCode v2 model state across omac sessions

  completed successfully:
  docs-pages#185:Pull request#441synchronizebyNoRiceToday
  NoRiceToday/Persist-OpenCode-Model-State

  Oct 29, 20262m 20s
  More actions for workflow run 185

• fix(cli): keep OpenCode v2 model state across omac sessions

  failed:
  CI#919:Pull request#441synchronizebyNoRiceToday
  NoRiceToday/Persist-OpenCode-Model-State

  Oct 29, 20265m 17s
  More actions for workflow run 919

• feat(cli): scope protected-file warnings to a project

  cancelled:
  docs-pages#184:Pull request#440synchronizebyNoRiceToday
  NoRiceToday/Reduce-protected-file-noise

  Oct 29, 20264s
  More actions for workflow run 184

• feat(cli): scope protected-file warnings to a project

  completed successfully:
  popup-visual#56:Pull request#440synchronizebyNoRiceToday
  NoRiceToday/Reduce-protected-file-noise

  Oct 29, 20261m 19s
  More actions for workflow run 56

• feat(cli): scope protected-file warnings to a project

  failed:
  CI#918:Pull request#440synchronizebyNoRiceToday
  NoRiceToday/Reduce-protected-file-noise

  Oct 29, 20266m 28s
  More actions for workflow run 918

• fix(cli): keep OpenCode v2 model state across omac sessions

  cancelled:
  CI#917:Pull request#441openedbyNoRiceToday
  NoRiceToday/Persist-OpenCode-Model-State

  Oct 29, 20261m 36s
  More actions for workflow run 917

• fix(cli): keep OpenCode v2 model state across omac sessions

  cancelled:
  docs-pages#183:Pull request#441openedbyNoRiceToday
  NoRiceToday/Persist-OpenCode-Model-State

  Oct 29, 20261m 17s
  More actions for workflow run 183

• feat(cli): scope protected-file warnings to a project

  cancelled:
  CI#916:Pull request#440openedbyNoRiceToday
  NoRiceToday/Reduce-protected-file-noise

  Oct 29, 20261m 40s
  More actions for workflow run 916

• feat(cli): scope protected-file warnings to a project

  completed successfully:
  popup-visual#55:Pull request#440openedbyNoRiceToday
  NoRiceToday/Reduce-protected-file-noise

  Oct 29, 202653s
  More actions for workflow run 55

• feat(cli): scope protected-file warnings to a project

  completed successfully:
  docs-pages#182:Pull request#440openedbyNoRiceToday
  NoRiceToday/Reduce-protected-file-noise

  Oct 29, 20261m 40s
  More actions for workflow run 182

• Security Finalize

  completed successfully:
  Security Finalize#42:Scheduled
  main

  Oct 29, 20263m 4s
  More actions for workflow run 42