Skip to content

Actions: AIOSAI/AIPass

Actions

Security Scan

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
security.yml
1,506 workflow runs
1,506 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
prax log watchdog covers branch logs/ dirs — .jsonl runaway growth caught (built by @prax). Root cause: rotation was .log-hardcoded and .jsonl writers are raw open('a') appenders bypassing prax; the watchdog safety net only scanned system_logs. Now scans all src/aipass/*/logs/ for .log+.jsonl (WARN 1MB / CRITICAL 10MB unrotated), enforce truncates to last 5000 lines, log-audit shows system + branch scopes. 11 new tests, 947 suite green. Offender writers (hooks 63MB engine.jsonl, backup 31MB operations.jsonl, trigger 7MB medic log) routed to owners separately. Security Scan #1508: Pull request #659 synchronize by AIOSAI
1m 48s dev
dev
1m 48s
backup: drive-sync respects .backupignore on sync path + PosixPath lo… Security Scan #1507: Commit 195b9f0 pushed by AIOSAI
2m 31s dev
dev
2m 31s
prax log watchdog covers branch logs/ dirs — .jsonl runaway growth caught (built by @prax). Root cause: rotation was .log-hardcoded and .jsonl writers are raw open('a') appenders bypassing prax; the watchdog safety net only scanned system_logs. Now scans all src/aipass/*/logs/ for .log+.jsonl (WARN 1MB / CRITICAL 10MB unrotated), enforce truncates to last 5000 lines, log-audit shows system + branch scopes. 11 new tests, 947 suite green. Offender writers (hooks 63MB engine.jsonl, backup 31MB operations.jsonl, trigger 7MB medic log) routed to owners separately. Security Scan #1506: Pull request #659 synchronize by AIOSAI
2m 27s dev
dev
2m 27s
tests: dev-docker verify script (bridge-era, 19 assertions) — proven … Security Scan #1505: Commit a20d191 pushed by AIOSAI
2m 41s dev
dev
2m 41s
prax log watchdog covers branch logs/ dirs — .jsonl runaway growth caught (built by @prax). Root cause: rotation was .log-hardcoded and .jsonl writers are raw open('a') appenders bypassing prax; the watchdog safety net only scanned system_logs. Now scans all src/aipass/*/logs/ for .log+.jsonl (WARN 1MB / CRITICAL 10MB unrotated), enforce truncates to last 5000 lines, log-audit shows system + branch scopes. 11 new tests, 947 suite green. Offender writers (hooks 63MB engine.jsonl, backup 31MB operations.jsonl, trigger 7MB medic log) routed to owners separately. Security Scan #1504: Pull request #659 synchronize by AIOSAI
1m 9s dev
dev
1m 9s
cadence fresh-context reset + aipass misroute guidance: SessionStart … Security Scan #1503: Commit 5fd8c6a pushed by AIOSAI
2m 28s dev
dev
2m 28s
prax log watchdog covers branch logs/ dirs — .jsonl runaway growth caught (built by @prax). Root cause: rotation was .log-hardcoded and .jsonl writers are raw open('a') appenders bypassing prax; the watchdog safety net only scanned system_logs. Now scans all src/aipass/*/logs/ for .log+.jsonl (WARN 1MB / CRITICAL 10MB unrotated), enforce truncates to last 5000 lines, log-audit shows system + branch scopes. 11 new tests, 947 suite green. Offender writers (hooks 63MB engine.jsonl, backup 31MB operations.jsonl, trigger 7MB medic log) routed to owners separately. Security Scan #1502: Pull request #659 opened by AIOSAI
1m 38s dev
dev
1m 38s
prax: log watchdog covers branch logs/ dirs — .jsonl runaway growth c… Security Scan #1501: Commit 47b5b2d pushed by AIOSAI
2m 33s dev
dev
2m 33s
Security Scan Security Scan #1500: Scheduled
2m 56s main
main
2m 56s
Merge pull request #658 from AIOSAI/dev Security Scan #1499: Commit f4f6943 pushed by AIOSAI
2m 54s main
main
2m 54s
setup.sh merges user hooks instead of overwriting (DPLAN-0234 Strand C). AIPass bridge entries are refreshed on every install (bridges/claude.py marker); user-wired hooks and custom events now survive install/re-run. Fixture-verified: customs preserved, stale bridge entries replaced without duplicates, fresh-install output shape-identical (7 events, 6+6 entries). Background: full hook fire-test on fresh Linux Docker install passed 17/17. Security Scan #1498: Pull request #658 synchronize by AIOSAI
1m 6s dev
dev
1m 6s
README: restore HVTrust badge — hvtracker issue #109 fixed upstream Security Scan #1497: Commit ce1a138 pushed by AIOSAI
2m 36s dev
dev
2m 36s
setup.sh merges user hooks instead of overwriting (DPLAN-0234 Strand C). AIPass bridge entries are refreshed on every install (bridges/claude.py marker); user-wired hooks and custom events now survive install/re-run. Fixture-verified: customs preserved, stale bridge entries replaced without duplicates, fresh-install output shape-identical (7 events, 6+6 entries). Background: full hook fire-test on fresh Linux Docker install passed 17/17. Security Scan #1496: Pull request #658 synchronize by AIOSAI
1m 8s dev
dev
1m 8s
docs: README CLI-support + CONTRIBUTING reflect ./aipass install flow Security Scan #1495: Commit cccfe5f pushed by AIOSAI
2m 32s dev
dev
2m 32s
setup.sh merges user hooks instead of overwriting (DPLAN-0234 Strand C). AIPass bridge entries are refreshed on every install (bridges/claude.py marker); user-wired hooks and custom events now survive install/re-run. Fixture-verified: customs preserved, stale bridge entries replaced without duplicates, fresh-install output shape-identical (7 events, 6+6 entries). Background: full hook fire-test on fresh Linux Docker install passed 17/17. Security Scan #1494: Pull request #658 synchronize by AIOSAI
1m 0s dev
dev
1m 0s
setup.sh: OS-aware hook bridge — Windows venv python is Scripts/pytho… Security Scan #1493: Commit 6200e01 pushed by AIOSAI
2m 36s dev
dev
2m 36s
setup.sh merges user hooks instead of overwriting (DPLAN-0234 Strand C). AIPass bridge entries are refreshed on every install (bridges/claude.py marker); user-wired hooks and custom events now survive install/re-run. Fixture-verified: customs preserved, stale bridge entries replaced without duplicates, fresh-install output shape-identical (7 events, 6+6 entries). Background: full hook fire-test on fresh Linux Docker install passed 17/17. Security Scan #1492: Pull request #658 opened by AIOSAI
2m 43s dev
dev
2m 43s
setup.sh: merge user hooks instead of overwriting (DPLAN-0234 Strand … Security Scan #1491: Commit 18dea21 pushed by AIOSAI
2m 22s dev
dev
2m 22s
Merge pull request #657 from AIOSAI/dev Security Scan #1490: Commit 2ac499d pushed by AIOSAI
2m 38s main
main
2m 38s
./aipass repo-root launcher — cold-clone entry (DPLAN-0234 Strand B, built by @aipass). git clone && cd AIPass && ./aipass install is now the whole cold-clone flow: pre-setup only 'install' works (delegates to setup.sh with flag pass-through), post-setup the launcher execs the venv binary transparently. 13 launcher tests, @aipass suite green, seedgo 100%. README Quick Start updated. Security Scan #1489: Pull request #657 opened by AIOSAI
1m 9s dev
dev
1m 9s
./aipass repo-root launcher — cold-clone entry (DPLAN-0234 Strand B, … Security Scan #1488: Commit c8e1f07 pushed by AIOSAI
2m 33s dev
dev
2m 33s
Merge pull request #656 from AIOSAI/dev Security Scan #1487: Commit 378ac1f pushed by AIOSAI
2m 47s main
main
2m 47s
setup.sh chains into aipass init run — clone-first one-command install (DPLAN-0234 Strand A). git clone && ./setup.sh now takes a new user from cold clone to an initialized first project in one command. --no-init/--with-init/--project mirror aipass install's handoff rules; CI + piped shells skip automatically (windows/macos-test workflows untouched, proven in clean-room Docker run 1). install.py passes --no-init so the pip path doesn't double-init. Clean-room Docker: both runs exit 0. Security Scan #1486: Pull request #656 opened by AIOSAI
1m 17s dev
dev
1m 17s
setup.sh chains into aipass init run — clone-first one-command instal… Security Scan #1485: Commit 5503b42 pushed by AIOSAI
2m 42s dev
dev
2m 42s
Merge pull request #655 from AIOSAI/dev Security Scan #1484: Commit 4877eb5 pushed by AIOSAI
3m 3s main
main
3m 3s