ci: annotate renamed tenant-token lint context

ci: remove slash from tenant-token lint workflow name
2026-05-19 14:13:34 -07:00 · 2026-05-19 13:13:39 -07:00
1 changed files with 3 additions and 1 deletions
@@ -1,4 +1,4 @@
-name: Lint no tenant GITEA/GITHUB token write
+name: Lint no tenant Gitea-GitHub token write

 # Task #146 — CI guardrail companion to RFC#523's `lint-forbidden-env-keys.yml`.
 #
@@ -58,6 +58,8 @@ env:
  GITHUB_SERVER_URL: https://git.moleculesai.app

 jobs:
+  # bp-exempt: merge protection is enforced through CI / all-required; this
+  # workflow is a component guardrail context rather than a direct BP context.
  scan:
    name: Scan for repo-host token write into tenant workspace surface
    runs-on: ubuntu-latest
Author	SHA1	Message	Date
fullstack-engineer	4d626c76f3	ci: annotate renamed tenant-token lint context Lint shellcheck (arm64 pilot) / shellcheck-arm64 (pilot) (pull_request) Waiting to run Details sop-checklist / na-declarations (pull_request) N/A: (none) Details audit-force-merge / audit (pull_request) Waiting to run Details Block internal-flavored paths / Block forbidden paths (pull_request) Waiting to run Details cascade-list-drift-gate / check (pull_request) Waiting to run Details Check migration collisions / Migration version collision check (pull_request) Waiting to run Details MCP Stdio Transport Regression / MCP stdio with regular-file stdout (pull_request) Waiting to run Details CI / all-required (pull_request) Waiting to run Details CI / Detect changes (pull_request) Waiting to run Details CI / Platform (Go) (pull_request) Waiting to run Details CI / Canvas (Next.js) (pull_request) Waiting to run Details CI / Shellcheck (E2E scripts) (pull_request) Waiting to run Details CI / Python Lint & Test (pull_request) Waiting to run Details E2E API Smoke Test / detect-changes (pull_request) Waiting to run Details E2E Chat / detect-changes (pull_request) Waiting to run Details E2E Peer Visibility (literal MCP list_peers) / E2E Peer Visibility (pull_request) Waiting to run Details E2E Peer Visibility (literal MCP list_peers) / E2E Peer Visibility (local) (pull_request) Waiting to run Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Waiting to run Details E2E Staging External Runtime / E2E Staging External Runtime (pull_request) Waiting to run Details E2E Staging SaaS (full lifecycle) / pr-validate (pull_request) Waiting to run Details E2E Staging SaaS (full lifecycle) / E2E Staging SaaS (pull_request) Waiting to run Details Handlers Postgres Integration / detect-changes (pull_request) Waiting to run Details Harness Replays / detect-changes (pull_request) Waiting to run Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Waiting to run Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Waiting to run Details Lint forbidden tenant-env keys / Scan workspace_secrets writers for forbidden env keys (pull_request) Waiting to run Details lint-mask-pr-atomicity / lint-mask-pr-atomicity (pull_request) Waiting to run Details Lint no tenant Gitea-GitHub token write / Scan for repo-host token write into tenant workspace surface (pull_request) Waiting to run Details Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Waiting to run Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Waiting to run Details lint-required-no-paths / lint-required-no-paths (pull_request) Waiting to run Details lint-required-workflows-docker-host-pinned / Lint docker-host pin on docker-touching workflows (pull_request) Waiting to run Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Waiting to run Details publish-runtime-autobump / pr-validate (pull_request) Waiting to run Details publish-runtime-autobump / bump-and-tag (pull_request) Waiting to run Details review-check-tests / review-check.sh regression tests (pull_request) Waiting to run Details Runtime Pin Compatibility / PyPI-latest install + import smoke (pull_request) Waiting to run Details Runtime PR-Built Compatibility / detect-changes (pull_request) Waiting to run Details Secret scan / Scan diff for credential-shaped strings (pull_request) Waiting to run Details Ops Scripts Tests / Ops scripts (unittest) (pull_request) Waiting to run Details gate-check-v3 / gate-check (pull_request) Waiting to run Details qa-review / approved (pull_request) Waiting to run Details security-review / approved (pull_request) Waiting to run Details sop-checklist / all-items-acked (pull_request) Waiting to run Details sop-checklist / review-refire (pull_request) Waiting to run Details sop-tier-check / tier-check (pull_request) Waiting to run Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Has been cancelled Details CI / Canvas Deploy Reminder (pull_request) Has been cancelled Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Has been cancelled Details E2E Chat / E2E Chat (pull_request) Has been cancelled Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Has been cancelled Details Harness Replays / Harness Replays (pull_request) Has been cancelled Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Has been cancelled Details	2026-05-19 14:13:34 -07:00
fullstack-engineer	c8c692e600	ci: remove slash from tenant-token lint workflow name Lint shellcheck (arm64 pilot) / shellcheck-arm64 (pilot) (pull_request) Waiting to run Details Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 9s Details CI / Detect changes (pull_request) Successful in 12s Details CI / Shellcheck (E2E scripts) (pull_request) Successful in 23s Details E2E API Smoke Test / detect-changes (pull_request) Successful in 15s Details E2E Chat / detect-changes (pull_request) Successful in 13s Details Handlers Postgres Integration / detect-changes (pull_request) Successful in 9s Details E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 11s Details Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 11s Details Lint forbidden tenant-env keys / Scan workspace_secrets writers for forbidden env keys (pull_request) Successful in 6s Details Lint no tenant Gitea-GitHub token write / Scan for repo-host token write into tenant workspace surface (pull_request) Successful in 4s Details lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Failing after 27s Details lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 1m22s Details lint-required-workflows-docker-host-pinned / Lint docker-host pin on docker-touching workflows (pull_request) Successful in 3s Details lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 21s Details Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 8s Details Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 3s Details gate-check-v3 / gate-check (pull_request) Successful in 4s Details Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 1m21s Details qa-review / approved (pull_request) Failing after 3s Details sop-checklist / na-declarations (pull_request) N/A: (none) Details sop-checklist / all-items-acked (pull_request) Successful in 4s Details security-review / approved (pull_request) Failing after 8s Details sop-tier-check / tier-check (pull_request) Successful in 4s Details Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 1m25s Details CI / Platform (Go) (pull_request) Successful in 5m16s Details CI / Canvas (Next.js) (pull_request) Successful in 7m0s Details CI / Python Lint & Test (pull_request) Successful in 7m3s Details CI / all-required (pull_request) Successful in 7m18s Details E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 5s Details E2E Chat / E2E Chat (pull_request) Successful in 8s Details E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 7s Details Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 5s Details Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 3s Details CI / Canvas Deploy Reminder (pull_request) Has been skipped Details	2026-05-19 13:13:39 -07:00