molecule-core/platform
Hongming Wang e80c170e36 fix(platform): resolve go vet errors + implement supply chain hardening (#768)
- Add supply_chain.go with VerifyManifestIntegrity (SHA256 content check)
- Add pinned-ref enforcement to GithubResolver.Fetch (rejects bare org/repo)
- Fix duplicate TestSlackAdapter_Type across channels_test.go and slack_test.go
- Fix sync.Once lock copy in audit_test.go resetAuditKeyCache
- Fix slack_test.go horizontal rule expectations to match implementation
- Existing tests updated with PLUGIN_ALLOW_UNPINNED=true for bare-ref specs

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-17 21:50:18 -07:00
..
cmd/server feat(slack): Level 1 auto-post + Level 2 inbound routing 2026-04-17 14:15:51 -07:00
docs/adr fix(wsauth): restore ValidateAnyToken removed-workspace JOIN (#682 defense-in-depth), restore ADR-001 blast-radius docs 2026-04-17 12:25:44 +00:00
internal fix(platform): resolve go vet errors + implement supply chain hardening (#768) 2026-04-17 21:50:18 -07:00
migrations feat(slack): upgrade adapter to Bot API with per-agent identity + fix pgvector migration 2026-04-17 14:15:51 -07:00
pkg/provisionhook fix(github): refresh installation token when TTL < 10 min (#547) (#567) 2026-04-17 00:47:03 +00:00
Dockerfile fix(ci): remove go.mod replace /plugin — add it at Docker build time only 2026-04-17 18:08:53 -07:00
Dockerfile.tenant fix(ci): remove go.mod replace /plugin — add it at Docker build time only 2026-04-17 18:08:53 -07:00
entrypoint-tenant.sh feat(platform): auto-detect SaaS tenant → control plane provisioner 2026-04-16 11:50:52 -07:00
go.mod fix(ci): remove go.mod replace /plugin — add it at Docker build time only 2026-04-17 18:08:53 -07:00
go.sum feat(platform): wire github-app-auth plugin for per-installation tokens 2026-04-16 12:52:20 -07:00