Jens/geointel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Stabilize the protected production release #8

Merged
Jens merged 2 commits from codex/stabilize-ai-sbom into main 2026-08-30 12:02:16 +00:00
Conversation 0 Commits 2 Files Changed 4
+15 -5
Jens commented 2026-08-30 11:25:57 +00:00
Owner
Copy Link
Copy Source

Two narrowly scoped release blockers are resolved: (1) bound the pinned Syft scanner Go heap inside the isolated 8 GiB Docker-in-Docker runner while retaining installed-package catalogers and the independent full Trivy scan; (2) bind predeploy backups only to an exact repository root so Tower cannot mistake the parent checkout for the prepared controller source. Includes supply-chain and backup regressions.

Two narrowly scoped release blockers are resolved: (1) bound the pinned Syft scanner Go heap inside the isolated 8 GiB Docker-in-Docker runner while retaining installed-package catalogers and the independent full Trivy scan; (2) bind predeploy backups only to an exact repository root so Tower cannot mistake the parent checkout for the prepared controller source. Includes supply-chain and backup regressions.
Jens added 1 commit 2026-08-30 11:25:58 +00:00
fix(ci): cap Syft heap inside DinD
Managed validation / Managed repository validation (pull_request) Successful in 2m39s
Details
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Successful in 2m49s
Details
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Successful in 31s
Details
GeoIntel release gates / Production AI image, SBOM and container scan (pull_request) Successful in 7m31s
Details
GeoIntel release gates / Deploy exact gated revision to Unraid (pull_request) Skipped
Details
9f771a61cf
Jens added 1 commit 2026-08-30 11:32:24 +00:00
fix(deploy): ignore parent Git checkout in backup binding
Managed validation / Managed repository validation (pull_request) Successful in 2m16s
Details
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Successful in 2m7s
Details
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Successful in 26s
Details
GeoIntel release gates / Production AI image, SBOM and container scan (pull_request) Successful in 7m43s
Details
GeoIntel release gates / Deploy exact gated revision to Unraid (pull_request) Skipped
Details
bf5e1b7e06
Jens changed title from Stabilize AI SBOM release gate to Stabilize the protected production release 2026-08-30 11:32:56 +00:00
Jens merged commit d24aa53056 into main 2026-08-30 12:02:16 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
finding:default-branch-action-failed
ProjectBrain rule DEFAULT_BRANCH_ACTION_FAILED
 finding:latest-action-failed
ProjectBrain rule LATEST_ACTION_FAILED
 finding:topic-branch-action-failed
ProjectBrain rule TOPIC_BRANCH_ACTION_FAILED
 projectbrain
Automatisch beheerd door ProjectBrain
 severity:critical
ProjectBrain finding severity
 severity:info
ProjectBrain finding severity
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
Jens (Jens Caers)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Jens/geointel#8