mirror of https://github.com/garrytan/gstack.git
8d6c2ff824
Three red-team/adversarial findings on the new required lane: (1) concurrency keyed on bare head_ref — two forks with the same branch name shared one group, so a push to fork B cancelled fork A's in-flight REQUIRED check (merge-pipeline DoS with no code fault); key on the PR number. (2) The runner's full logs die with the runner in os.tmpdir() — a red check named WHICH test failed but never why; upload the shard logs as an artifact on failure. (3) PR-only trigger meant two individually-green PRs could merge into a red main with nothing running the suite there; add push: branches: [main]. |
||
|---|---|---|
| .. | ||
| actionlint.yml | ||
| ci-image.yml | ||
| dependency-review.yml | ||
| evals-periodic.yml | ||
| evals.yml | ||
| free-tests.yml | ||
| make-pdf-gate.yml | ||
| osv-scanner.yml | ||
| pr-title-sync.yml | ||
| quality-gate.yml | ||
| skill-docs.yml | ||
| version-gate.yml | ||
| windows-free-tests.yml | ||
| windows-setup-e2e.yml | ||