Skip to content

Actions: CodesWhat/drydock

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
1,927 workflow runs
1,927 workflow runs

Filter by Workflow

⌥ + click/return to exclude

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
🛡️ Security: OpenSSF Scorecard — main 🛡️ Security: OpenSSF Scorecard #100: Commit 6fc0f37 pushed by scttbnsn
55s main
main
55s
🔬 CI Verify — 🔒 security(image): clear image HIGH/CRITICAL CVEs and scope the Grype gate (#442) ## What Clears the HIGH/CRITICAL container-image CVEs that the new grype-image scan (added in #441) surfaced, and scopes the Grype image gate so it stays accurate going forward. Before this change the built release image reported **11 critical + 22 high**. After it: **0 HIGH/CRITICAL outside the two bundled third-party tool binaries** (cosign, trivy), which are triaged with a documented, locat... 🔬 CI Verify #389: Commit 6fc0f37 pushed by scttbnsn
27m 48s main
main
27m 48s
🛡️ Security: Grype — Manual by scttbnsn 🛡️ Security: Grype #4: Manually run by scttbnsn
3m 59s main
main
3m 59s
🎭 E2E: Playwright — 🔒 security(image): clear image HIGH/CRITICAL CVEs and scope the Grype gate (#442) ## What Clears the HIGH/CRITICAL container-image CVEs that the new grype-image scan (added in #441) surfaced, and scopes the Grype image gate so it stays accurate going forward. Before this change the built release image reported **11 critical + 22 high**. After it: **0 HIGH/CRITICAL outside the two bundled third-party tool binaries** (cosign, trivy), which are triaged with a documented,... 🎭 E2E: Playwright #176: Commit 6fc0f37 pushed by scttbnsn
6m 20s main
main
6m 20s
🎭 E2E: Playwright — PR #442: 🔒 security(image): clear image HIGH/CRITICAL CVEs and scope the Grype gate 🎭 E2E: Playwright #175: Pull request #442 opened by scttbnsn
8m 8s fix/image-cve-grype
fix/image-cve-grype
8m 8s
🔬 CI Verify — PR #442: 🔒 security(image): clear image HIGH/CRITICAL CVEs and scope the Grype gate 🔬 CI Verify #388: Pull request #442 opened by scttbnsn
22m 55s fix/image-cve-grype
fix/image-cve-grype
22m 55s
🛡️ Security: Grype — PR #442 🛡️ Security: Grype #3: Pull request #442 opened by scttbnsn
1m 17s fix/image-cve-grype
fix/image-cve-grype
1m 17s
🛡️ Security: Grype — Manual by scttbnsn 🛡️ Security: Grype #2: Manually run by scttbnsn
2m 19s main
main
2m 19s
🔬 CI Verify — 🔧 chore(security): drop Snyk, consolidate dep/CVE scanning on Grype (#441) Decommissions Snyk and consolidates dependency/CVE scanning on **Grype**. ## Why Snyk's GitHub SCM integration scans the full dependency *requirement graph* across every package.json/package-lock.json rather than the resolved, shipped dependency set, so it over-reports advisories in transitive packages the lockfile never resolves to — noise on top of a redundant paid integration that, in practice, was... 🔬 CI Verify #387: Commit c487d99 pushed by scttbnsn
26m 3s main
main
26m 3s
🛡️ Security: OpenSSF Scorecard — main 🛡️ Security: OpenSSF Scorecard #99: Commit c487d99 pushed by scttbnsn
54s main
main
54s
🎭 E2E: Playwright — 🔧 chore(security): drop Snyk, consolidate dep/CVE scanning on Grype (#441) Decommissions Snyk and consolidates dependency/CVE scanning on **Grype**. ## Why Snyk's GitHub SCM integration scans the full dependency *requirement graph* across every package.json/package-lock.json rather than the resolved, shipped dependency set, so it over-reports advisories in transitive packages the lockfile never resolves to — noise on top of a redundant paid integration that, in practic... 🎭 E2E: Playwright #174: Commit c487d99 pushed by scttbnsn
4m 56s main
main
4m 56s
🎭 E2E: Playwright — PR #441: 🔧 chore(security): drop Snyk, consolidate dep/CVE scanning on Grype 🎭 E2E: Playwright #173: Pull request #441 opened by scttbnsn
5m 31s chore/drop-snyk-grype
chore/drop-snyk-grype
5m 31s
🔬 CI Verify — PR #441: 🔧 chore(security): drop Snyk, consolidate dep/CVE scanning on Grype 🔬 CI Verify #386: Pull request #441 opened by scttbnsn
16m 39s chore/drop-snyk-grype
chore/drop-snyk-grype
16m 39s
🛡️ Security: Grype — PR #441 🛡️ Security: Grype #1: Pull request #441 opened by scttbnsn
1m 16s chore/drop-snyk-grype
chore/drop-snyk-grype
1m 16s
🎭 E2E: Playwright — ✨ feat(cli): colored startup banner from the whale logo (#440) ## What drydock now renders a compact colored banner of the whale logo on startup when attached to an interactive terminal, followed by a drydock v<version> · <mode> identity line. ## How - **Build-time bake.** scripts/gen-banner.mjs samples the master logo (drydock.png) to a 50-cell-wide grid and renders each terminal row as two pixel rows via the ▀ half-block (upper pixel = foreground, lower = backg... 🎭 E2E: Playwright #172: Commit 330a40f pushed by scttbnsn
5m 3s main
main
5m 3s
🛡️ Security: OpenSSF Scorecard — main 🛡️ Security: OpenSSF Scorecard #98: Commit 330a40f pushed by scttbnsn
51s main
main
51s
🔬 CI Verify — ✨ feat(cli): colored startup banner from the whale logo (#440) ## What drydock now renders a compact colored banner of the whale logo on startup when attached to an interactive terminal, followed by a drydock v<version> · <mode> identity line. ## How - **Build-time bake.** scripts/gen-banner.mjs samples the master logo (drydock.png) to a 50-cell-wide grid and renders each terminal row as two pixel rows via the ▀ half-block (upper pixel = foreground, lower = background)... 🔬 CI Verify #385: Commit 330a40f pushed by scttbnsn
27m 7s main
main
27m 7s
🎭 E2E: Playwright — PR #440: ✨ feat(cli): colored startup banner from the whale logo 🎭 E2E: Playwright #171: Pull request #440 opened by scttbnsn
5m 27s banner/cli-startup
banner/cli-startup
5m 27s
🔬 CI Verify — PR #440: ✨ feat(cli): colored startup banner from the whale logo 🔬 CI Verify #384: Pull request #440 opened by scttbnsn
22m 4s banner/cli-startup
banner/cli-startup
22m 4s
🎭 E2E: Playwright — 🎨 style(brand): refresh the drydock whale logo everywhere (#439) New master render (drydock.png, repo root) replaces the whale brand mark across every surface, all regenerated from the single master via the new committed scripts/regenerate-brand-assets.sh (ImageMagick). **Replaced (filenames preserved in place):** - **App UI** (ships in the image): drydock-logo.png, whale-logo.png, favicon.ico/.svg/-96, apple-touch-icon, PWA manifest icons - **Website (`apps/... 🎭 E2E: Playwright #170: Commit bab63f4 pushed by scttbnsn
5m 36s main
main
5m 36s
🛡️ Security: OpenSSF Scorecard — main 🛡️ Security: OpenSSF Scorecard #97: Commit bab63f4 pushed by scttbnsn
54s main
main
54s
🔬 CI Verify — 🎨 style(brand): refresh the drydock whale logo everywhere (#439) New master render (drydock.png, repo root) replaces the whale brand mark across every surface, all regenerated from the single master via the new committed scripts/regenerate-brand-assets.sh (ImageMagick). **Replaced (filenames preserved in place):** - **App UI** (ships in the image): drydock-logo.png, whale-logo.png, favicon.ico/.svg/-96, apple-touch-icon, PWA manifest icons - **Website (apps/web) ... 🔬 CI Verify #383: Commit bab63f4 pushed by scttbnsn
25m 50s main
main
25m 50s
🔬 CI Verify — PR #439: 🎨 style(brand): refresh the drydock whale logo everywhere 🔬 CI Verify #382: Pull request #439 opened by scttbnsn
19m 23s brand/new-logo
brand/new-logo
19m 23s
🎭 E2E: Playwright — PR #439: 🎨 style(brand): refresh the drydock whale logo everywhere 🎭 E2E: Playwright #169: Pull request #439 opened by scttbnsn
5m 2s brand/new-logo
brand/new-logo
5m 2s
🎭 E2E: Playwright — 🔒 security: patch transitive CVEs in apps/web (js-yaml) and e2e (@opentelemetry/core) (#438) Post-rc.37 dependency hygiene for two transitive CVEs flagged after the cut. Both are **build/test-time only — neither is in the shipped drydock container image.** - **apps/web** — fumadocs-mdx pulled js-yaml@4.1.1 (GHSA-h67p-54hq-rp68, fixed 4.2.0). Override → 4.2.0; postinstall docs-sync/MDX frontmatter generation runs clean. Clears Dependabot #139. - **e2e** — artiller... 🎭 E2E: Playwright #168: Commit 521085e pushed by scttbnsn
5m 20s main
main
5m 20s