molecule-core/workspace-server
Molecule AI · core-security 9ce484886d
Some checks failed
Block internal-flavored paths / Block forbidden paths (pull_request) Failing after 32s
E2E Staging SaaS (full lifecycle) / E2E Staging SaaS (pull_request) Has been skipped
E2E Staging SaaS (full lifecycle) / pr-validate (pull_request) Successful in 1m10s
Harness Replays / detect-changes (pull_request) Successful in 28s
CI / Detect changes (pull_request) Successful in 2m0s
E2E API Smoke Test / detect-changes (pull_request) Successful in 1m46s
Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 20s
E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 1m51s
Handlers Postgres Integration / detect-changes (pull_request) Successful in 1m31s
CI / all-required (pull_request) Blocked by required conditions
publish-runtime-autobump / bump-and-tag (pull_request) Has been skipped
Secret scan / Scan diff for credential-shaped strings (pull_request) Failing after 22s
publish-runtime-autobump / pr-validate (pull_request) Successful in 1m3s
qa-review / approved (pull_request) Successful in 26s
lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 1m22s
gate-check-v3 / gate-check (pull_request) Successful in 44s
Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 1m9s
security-review / approved (pull_request) Successful in 17s
sop-checklist / all-items-acked (pull_request) Successful in 18s
sop-tier-check / tier-check (pull_request) Successful in 19s
lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 2m33s
Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 2m22s
Ops Scripts Tests / Ops scripts (unittest) (pull_request) Failing after 1m37s
lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 2m38s
lint-mask-pr-atomicity / lint-mask-pr-atomicity (pull_request) Successful in 2m45s
E2E Staging External Runtime / E2E Staging External Runtime (pull_request) Successful in 5m33s
Harness Replays / Harness Replays (pull_request) Successful in 6s
CI / Shellcheck (E2E scripts) (pull_request) Successful in 7s
Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Failing after 13m40s
E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 2m36s
Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 5m35s
Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 2m44s
CI / Python Lint & Test (pull_request) Successful in 7m49s
CI / Platform (Go) (pull_request) Failing after 8m2s
E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 9m26s
CI / Canvas (Next.js) (pull_request) Failing after 15m46s
CI / Canvas Deploy Reminder (pull_request) Has been skipped
merge: resolve conflicts with main — keep CWE-78 guard + rows.Err() checks
Conflict resolution for PR mc#1071 targeting main:
- org_helpers.go: deduplicate expandEnvRef/isEnvIdentStart/isEnvIdentPart (added inline by main, also present in branch with doc comment; kept documented version)
- org_helpers_pure_test.go: merge whitespace-only formatting conflicts (take main alignment)
- org_helpers_security_test.go: merge style conflicts + keep main POSIX guard tests
- instructions_test.go: keep both branches of add/add conflict
- delegation_list_test.go: keep main version (branch deleted it)

Security fix (CWE-78) and rows.Err() checks are identical in both branches and remain intact.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-14 21:09:07 +00:00
..
cmd fix(main): heal ADMIN_TOKEN placeholder in global_secrets on startup (#831) 2026-05-13 22:42:32 +00:00
internal merge: resolve conflicts with main — keep CWE-78 guard + rows.Err() checks 2026-05-14 21:09:07 +00:00
migrations feat(plugins): plugin drift detector + queue + admin apply endpoint (#123) 2026-05-10 00:39:50 +00:00
pkg/provisionhook feat(#1957): wire gh-identity plugin into workspace-server 2026-04-24 15:01:41 +00:00
.air.toml feat(local-dev): air-based hot-reload for workspace-server 2026-05-08 08:10:50 -07:00
.ci-force chore: force Platform(Go) CI run on main — validate go vet clean 2026-04-21 15:43:19 +00:00
.gitignore feat(local-dev): containerize platform + canvas stack via docker-compose (closes #126) 2026-05-08 10:53:39 -07:00
.golangci.yaml chore(workspace-server): add golangci.yaml disabling errcheck 2026-04-24 07:16:54 +00:00
Dockerfile fix(platform): install docker-cli-buildx in workspace-server image (mc#765 follow-up) 2026-05-12 22:14:46 -07:00
Dockerfile.dev ci(docker): pin base image digests in all Dockerfiles 2026-05-09 23:56:39 +00:00
Dockerfile.tenant fix(dockerfile-tenant): chown /org-templates to canvas user so !external resolver can mkdir cache 2026-05-09 19:40:52 -07:00
entrypoint-tenant.sh fix(memory-plugin): gate sidecar spawn on cutover-active 2026-05-05 12:39:03 -07:00
go.mod fix(handlers): synchronize async DB users in race tests 2026-05-14 09:37:52 -07:00
go.sum [core-lead-agent] fix(core#228): cascade fixes for PluginResolver — make main compile 2026-05-10 09:46:35 +00:00