Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1133 commits
Select commit Hold shift + click to select a range
5148f49
Assert non-root-owned OCI scratch mounts
cmahmud Aug 24, 2026
4be362b
Expose scanner process runner contract
cmahmud Aug 24, 2026
ea429d8
Expose OCI scanner process runner adapter
cmahmud Aug 24, 2026
b284757
Allow scanner availability through injected process runners
cmahmud Aug 24, 2026
78ab0f0
Make Grype execution runner-injectable
cmahmud Aug 24, 2026
e6bfa9e
Make Syft execution runner-injectable
cmahmud Aug 24, 2026
eeb41ee
Compose OCI-isolated dependency scanner set
cmahmud Aug 24, 2026
7325624
Export OCI-isolated dependency scanner set
cmahmud Aug 24, 2026
95bc712
Test PostgreSQL conformance across independent replica pools
cmahmud Aug 24, 2026
34fc141
Test PostgreSQL shared state across reconnects
cmahmud Aug 24, 2026
d7464e2
Fix concurrent PostgreSQL replay claim visibility
cmahmud Aug 24, 2026
db0a74d
Make PostgreSQL queue insertion idempotent
cmahmud Aug 24, 2026
596468f
Require idempotent PostgreSQL queue insertion
cmahmud Aug 24, 2026
0ea006a
Cover PostgreSQL queue idempotency provenance checks
cmahmud Aug 24, 2026
2458ac0
Add bounded request source to sink flow evidence
cmahmud Aug 24, 2026
7b3bd1e
Integrate request source flow analysis
cmahmud Aug 24, 2026
49feec3
Export request input flow analysis
cmahmud Aug 24, 2026
54af40e
Test bounded request source flow evidence
cmahmud Aug 24, 2026
ca7238d
Fail closed on ambiguous request propagation
cmahmud Aug 24, 2026
67415de
Test fail-closed request propagation boundary
cmahmud Aug 24, 2026
9483b97
Fix request flow resolution expectation
cmahmud Aug 24, 2026
9bd8dae
Document bounded request input flow evidence
cmahmud Aug 24, 2026
5df8af0
feat(repository): add bounded immutable request-input forwarding
cmahmud Aug 24, 2026
36ecc4f
feat(repository): integrate immutable request-input forwarding
cmahmud Aug 24, 2026
4a1dba8
build(repository): export request-input forwarding evidence
cmahmud Aug 24, 2026
351323c
test(repository): cover bounded request-input forwarding
cmahmud Aug 24, 2026
73e6b68
docs(repository): document bounded request-input forwarding
cmahmud Aug 24, 2026
c4c8a69
fix(repository): correct forwarding target extraction
cmahmud Aug 24, 2026
c567e6e
feat(github): add atomic runtime credential reload source
cmahmud Aug 24, 2026
da8305f
feat(github): resolve App private key per token operation
cmahmud Aug 24, 2026
a0dcb5e
feat(github): resolve webhook secret per request
cmahmud Aug 24, 2026
283417e
build(github): export runtime credential source
cmahmud Aug 24, 2026
0e5b89c
test(github): cover atomic runtime credential reload
cmahmud Aug 24, 2026
03909a2
docs(github): add runtime credential reload runbook
cmahmud Aug 24, 2026
334fe31
Add bounded route middleware composition analysis
cmahmud Aug 24, 2026
ac6191e
Export route middleware composition analysis
cmahmud Aug 24, 2026
efe809f
Integrate route middleware composition into flow analysis
cmahmud Aug 24, 2026
dc5b1b7
Test conservative route middleware composition
cmahmud Aug 24, 2026
9ded4fa
Document route middleware composition evidence
cmahmud Aug 24, 2026
4a9dbfb
Add bounded GitHub App manifest provisioning flow
cmahmud Aug 24, 2026
c3e188f
Export GitHub App provisioning helpers
cmahmud Aug 24, 2026
9d5589d
Test GitHub App manifest provisioning boundaries
cmahmud Aug 24, 2026
0f4ed1b
Add GitHub App manifest provisioning CLI
cmahmud Aug 24, 2026
7e2960f
Expose GitHub App provisioning CLI
cmahmud Aug 24, 2026
7ac3ae5
Test GitHub App provisioning CLI
cmahmud Aug 24, 2026
80ae7bf
Document GitHub App manifest provisioning workflow
cmahmud Aug 24, 2026
dc5ed5a
Add secret-manager handoff for App manifest conversion
cmahmud Aug 24, 2026
0b9872e
Test manifest conversion secret-manager handoff
cmahmud Aug 24, 2026
9474f29
Document manifest conversion credential handoff
cmahmud Aug 24, 2026
dfb2c97
Resolve explicit Django URLConf function views
cmahmud Aug 25, 2026
ed8bb12
Integrate Django URLConf view resolution
cmahmud Aug 25, 2026
ccc8b32
Export Django route handler analysis
cmahmud Aug 25, 2026
66959ba
Test conservative Django URLConf view resolution
cmahmud Aug 25, 2026
c0e7651
Document bounded Django URLConf resolution
cmahmud Aug 25, 2026
a1f6523
Add bounded Django URLConf include composition
cmahmud Aug 25, 2026
ccf6c48
Integrate Django URLConf include composition
cmahmud Aug 25, 2026
c98cb9e
Handle empty Django include prefixes
cmahmud Aug 25, 2026
60c2aa5
Test bounded Django URLConf include composition
cmahmud Aug 25, 2026
bbb425c
Export Django URLConf composition analysis
cmahmud Aug 25, 2026
013e0c6
Document bounded Django URLConf composition
cmahmud Aug 25, 2026
6f91cb2
Preserve include provenance for empty Django prefixes
cmahmud Aug 25, 2026
fb5a404
Add mounted GitHub App runtime credential source
cmahmud Aug 25, 2026
22bef3c
Test mounted GitHub App runtime credentials
cmahmud Aug 25, 2026
3a17021
Export mounted GitHub App credential loader
cmahmud Aug 25, 2026
26c1ecc
Document mounted GitHub App credential boundary
cmahmud Aug 25, 2026
dff2dba
Add bounded FastAPI route dependency analysis
cmahmud Aug 25, 2026
d2f63a7
Export FastAPI dependency analysis
cmahmud Aug 25, 2026
2c811d0
Integrate FastAPI dependency contexts into route flow
cmahmud Aug 25, 2026
1bf2f05
Test conservative FastAPI dependency composition
cmahmud Aug 25, 2026
137d11a
Document FastAPI structural dependency evidence
cmahmud Aug 25, 2026
bdeec5b
Decouple FastAPI dependency discovery from handler resolution
cmahmud Aug 25, 2026
8e011bf
Recognize FastAPI decorators independently of generic route hints
cmahmud Aug 25, 2026
d3a5210
Assert FastAPI dependency context independently of handler resolution
cmahmud Aug 25, 2026
97dd169
feat(repository): resolve bounded FastAPI handler dependencies
cmahmud Aug 25, 2026
5e83937
test(repository): cover FastAPI handler dependency parameters
cmahmud Aug 25, 2026
68f50ac
docs(repository): document FastAPI handler dependencies
cmahmud Aug 25, 2026
fe81529
fix(repository): resolve FastAPI handlers independently
cmahmud Aug 25, 2026
d543efb
feat(github): add rolling upgrade safety gate
cmahmud Aug 25, 2026
43b9eb3
build(github): export app upgrade assessment
cmahmud Aug 25, 2026
4b49a0c
test(github): cover rolling upgrade safety gate
cmahmud Aug 25, 2026
451aa11
docs(github): add safe rolling upgrade procedure
cmahmud Aug 25, 2026
b76ff7a
feat(github): enforce webhook admission drain
cmahmud Aug 25, 2026
dc280ec
build(github): export webhook drain controller
cmahmud Aug 25, 2026
312fbed
test(github): cover enforced webhook admission drain
cmahmud Aug 25, 2026
5f832be
docs(github): wire enforced admission drain into upgrade flow
cmahmud Aug 25, 2026
22be88d
Enforce GitHub App worker admission drain
cmahmud Aug 25, 2026
80b9420
Wire worker admission drain into hosted runner
cmahmud Aug 25, 2026
c4554f9
Export GitHub App worker drain controller
cmahmud Aug 25, 2026
3b70b76
Require closed worker admission for upgrade drain
cmahmud Aug 25, 2026
5f84b97
Test enforced GitHub App worker drain
cmahmud Aug 25, 2026
b2c5a51
Test worker admission in upgrade drain gate
cmahmud Aug 25, 2026
ac0c589
Document enforced worker drain orchestration
cmahmud Aug 25, 2026
e97c7e9
Add GitHub App maintenance drain orchestration
cmahmud Aug 25, 2026
d4593de
Export GitHub App maintenance controller
cmahmud Aug 25, 2026
ba7806b
Test GitHub App maintenance orchestration
cmahmud Aug 25, 2026
aa9e6e6
Document GitHub App service-manager maintenance boundary
cmahmud Aug 25, 2026
efc182d
Add PostgreSQL durable lease observer
cmahmud Aug 25, 2026
e8e7321
Export PostgreSQL durable lease observer
cmahmud Aug 25, 2026
08158a4
Test PostgreSQL durable lease observation
cmahmud Aug 25, 2026
3973d20
Run PostgreSQL lease observer integration in CI
cmahmud Aug 25, 2026
d38cad3
Document built-in PostgreSQL lease observer
cmahmud Aug 25, 2026
afa5615
Keep maintenance polling timer live
cmahmud Aug 25, 2026
63b3cfc
Add service-manager lifecycle drain bridge
cmahmud Aug 25, 2026
5176f93
Export service lifecycle bridge
cmahmud Aug 25, 2026
74ebe93
Test service lifecycle drain bridge
cmahmud Aug 25, 2026
09b4cce
Document service-manager lifecycle integration
cmahmud Aug 25, 2026
4a59fcd
Add authenticated hosted installation ownership verification
cmahmud Aug 25, 2026
b54e434
Add PostgreSQL hosted installation ownership store
cmahmud Aug 25, 2026
817058c
Export hosted installation ownership modules
cmahmud Aug 25, 2026
68e126b
Test authenticated hosted installation ownership verification
cmahmud Aug 25, 2026
7f4ead7
Test PostgreSQL hosted installation tenant fencing
cmahmud Aug 25, 2026
ce00c7a
Run hosted ownership PostgreSQL integration in CI
cmahmud Aug 25, 2026
649b58e
Document hosted GitHub installation ownership boundary
cmahmud Aug 25, 2026
86f13f5
Add fenced hosted ownership reverification protocol
cmahmud Aug 25, 2026
058171e
Persist fenced hosted ownership reverification
cmahmud Aug 25, 2026
7761a28
Test fenced hosted ownership reverification
cmahmud Aug 25, 2026
6cd67b5
Export hosted ownership reverification
cmahmud Aug 25, 2026
300b429
Test PostgreSQL ownership reverification fences
cmahmud Aug 25, 2026
054122f
Document revocation-aware hosted ownership
cmahmud Aug 25, 2026
2acd4d9
Fix strict row narrowing in ownership store
cmahmud Aug 25, 2026
a8497ba
Add bounded hosted ownership re-verification sweeps
cmahmud Aug 25, 2026
c507de2
Test hosted ownership re-verification sweeps
cmahmud Aug 25, 2026
95608d2
Export hosted ownership re-verification sweeps
cmahmud Aug 25, 2026
e16b3c0
Document hosted ownership re-verification sweeps
cmahmud Aug 25, 2026
0195788
Add machine-readable release readiness assessment
cmahmud Aug 25, 2026
714fab6
Test release readiness fail-closed assessment
cmahmud Aug 25, 2026
284947f
Wire release readiness commands
cmahmud Aug 25, 2026
67975a3
Run release readiness assessment in CI
cmahmud Aug 25, 2026
d9bccd4
Document release readiness gate
cmahmud Aug 25, 2026
190088c
Add fail-closed GitHub App recovery admission gate
cmahmud Aug 25, 2026
fa78cd3
Test fail-closed GitHub App recovery admission
cmahmud Aug 25, 2026
3d0d1a7
Document GitHub App recovery boundary
cmahmud Aug 25, 2026
f132e24
Export GitHub App recovery controller
cmahmud Aug 25, 2026
d1e6047
Add bounded request helper return-flow evidence
cmahmud Aug 25, 2026
bcf651c
Fix imported call shadow detection for const result bindings
cmahmud Aug 25, 2026
d677430
Add bounded request return alias flow evidence
cmahmud Aug 25, 2026
ac9d4ee
Export request return alias flow analysis
cmahmud Aug 25, 2026
74fd80c
Test bounded request return alias flow evidence
cmahmud Aug 25, 2026
5fa849c
Document bounded request return alias evidence
cmahmud Aug 25, 2026
9435694
Fix request return alias forwarding bound fixture
cmahmud Aug 25, 2026
e634364
Add protected GitHub App operator status boundary
cmahmud Aug 25, 2026
cc521bf
Add secret-free GitHub App host profile
cmahmud Aug 25, 2026
2214f10
feat(github): add executable intake host composition
cmahmud Aug 25, 2026
b5f2e61
build(github): export intake host
cmahmud Aug 25, 2026
a6d3ff3
feat(host): add deployable GitHub App intake executable
cmahmud Aug 25, 2026
202ea47
build: expose GitHub App intake host executable
cmahmud Aug 25, 2026
ddf789b
test(github): cover intake host activation boundaries
cmahmud Aug 25, 2026
e5b7aef
docs: document deployable GitHub App intake host
cmahmud Aug 25, 2026
510e063
Add scoped scanner adapter factory
cmahmud Aug 25, 2026
cbb1f61
Add enforced OCI GitHub App worker host
cmahmud Aug 25, 2026
708928c
Export GitHub App worker host
cmahmud Aug 25, 2026
ac47a6f
Reference scanners from GitHub host package
cmahmud Aug 25, 2026
983bfbf
Test enforced OCI worker host boundary
cmahmud Aug 25, 2026
84d5c82
Add executable GitHub App worker process
cmahmud Aug 25, 2026
ec7ac54
Add GitHub App worker host command
cmahmud Aug 25, 2026
cb3fd35
Document executable OCI worker host
cmahmud Aug 25, 2026
3094c72
feat(scanners): inject process runner into Checkov
cmahmud Aug 25, 2026
96c2eed
feat(scanners): add Checkov to enforced OCI scanner set
cmahmud Aug 25, 2026
c29ea45
feat(scanners): export general OCI scanner composition
cmahmud Aug 25, 2026
94a0d4f
feat(github): allow Checkov in enforced OCI worker
cmahmud Aug 25, 2026
9b8d13d
test(scanners): cover Checkov injected execution runner
cmahmud Aug 25, 2026
1b3ec1a
test(github): cover Checkov hosted OCI admission
cmahmud Aug 25, 2026
ac55d98
docs: document Checkov OCI worker support
cmahmud Aug 25, 2026
82f09ba
feat(repository): compose bounded FastAPI routers
cmahmud Aug 25, 2026
7c79efd
feat(repository): integrate FastAPI router composition
cmahmud Aug 25, 2026
ca9d6b0
fix(repository): tighten FastAPI router declaration ordering
cmahmud Aug 25, 2026
219bb9d
feat(repository): export FastAPI router composition
cmahmud Aug 25, 2026
f7c5d82
test(repository): cover FastAPI router composition
cmahmud Aug 25, 2026
02d124c
docs: explain bounded FastAPI router composition
cmahmud Aug 25, 2026
fdf5688
fix(repository): resolve FastAPI composed route handlers independently
cmahmud Aug 25, 2026
76a07dd
fix(repository): reuse bounded FastAPI handler resolution
cmahmud Aug 25, 2026
0dfd6ad
feat(repository): compose Flask blueprints conservatively
cmahmud Aug 25, 2026
12f8229
test(repository): cover Flask blueprint composition
cmahmud Aug 25, 2026
2f99674
build(repository): export Flask blueprint composition
cmahmud Aug 25, 2026
36e5cfe
feat(repository): integrate Flask blueprint route analysis
cmahmud Aug 25, 2026
cf60367
test(repository): integrate Flask blueprints into route flow
cmahmud Aug 25, 2026
9d9480e
docs(repository): document Flask blueprint composition
cmahmud Aug 25, 2026
dbd58d1
feat(repository): compose mounted Express routers
cmahmud Aug 25, 2026
92f3a72
test(repository): cover Express router composition
cmahmud Aug 25, 2026
09c1050
build(repository): export Express router composition
cmahmud Aug 25, 2026
76730e6
feat(repository): integrate Express router composition
cmahmud Aug 25, 2026
1267c17
docs(repository): document Express router composition
cmahmud Aug 25, 2026
3b48009
test(repository): correlate mounted Express routes to sinks
cmahmud Aug 25, 2026
c61fbec
fix(repository): export imported route handler resolver
cmahmud Aug 25, 2026
2d66106
test(repository): preserve request flow across Express mounts
cmahmud Aug 25, 2026
5a35fd0
feat(repository): add bounded NestJS controller composition
cmahmud Aug 25, 2026
c299151
feat(repository): integrate NestJS controller flow analysis
cmahmud Aug 25, 2026
69c5463
feat(repository): export NestJS controller composition
cmahmud Aug 25, 2026
bf3bdf0
test(repository): cover NestJS controller composition
cmahmud Aug 25, 2026
b06ab3f
docs(repository): document NestJS structural route evidence
cmahmud Aug 25, 2026
8fe5d2b
feat(repository): add bounded Koa router composition
cmahmud Aug 25, 2026
777bccf
feat(repository): integrate Koa route analysis
cmahmud Aug 25, 2026
e2fe101
chore(repository): export Koa router analysis
cmahmud Aug 25, 2026
cdb98e3
test(repository): cover Koa router composition
cmahmud Aug 25, 2026
3e5eecb
docs(repository): document Koa structural evidence
cmahmud Aug 25, 2026
797c479
test(repository): correlate Koa request sources to sinks
cmahmud Aug 25, 2026
3efcf1b
test(repository): preserve bounded Koa request-flow invariant
cmahmud Aug 25, 2026
f8ee071
test(repository): assert exact Koa process evidence
cmahmud Aug 25, 2026
2c51af4
test(repository): keep Koa correlation claims structural
cmahmud Aug 25, 2026
ff8cc54
feat(repository): add bounded Go call graph support
cmahmud Aug 25, 2026
95c31b2
feat(repository): add bounded Gin router composition
cmahmud Aug 25, 2026
7dca472
feat(repository): integrate Gin route flow analysis
cmahmud Aug 25, 2026
7403003
build(repository): export Gin composition
cmahmud Aug 25, 2026
281815b
test(repository): cover bounded Gin route composition
cmahmud Aug 25, 2026
38d56b4
test(repository): correct Gin route source line
cmahmud Aug 25, 2026
49a8818
docs(repository): document Gin route composition
cmahmud Aug 25, 2026
2f0983e
fix(repository): retain one-line Go functions
cmahmud Aug 25, 2026
10743bd
fix(repository): fail closed on ambiguous Gin handlers
cmahmud Aug 25, 2026
6b182a4
test(repository): assert Gin-specific resolution and ambiguity
cmahmud Aug 25, 2026
b90591d
feat(repository): add bounded Gin request input flow
cmahmud Aug 26, 2026
023c06d
export Gin request input flow evidence
cmahmud Aug 26, 2026
ff62036
test(repository): cover bounded Gin request source flows
cmahmud Aug 26, 2026
d3b9356
docs(repository): document Gin request flow boundary
cmahmud Aug 26, 2026
a13aa4a
fix(repository): recognize unaliased Gin imports exactly
cmahmud Aug 26, 2026
76c4ea1
fix(repository): bind Gin source parsing to resolved Gin routes
cmahmud Aug 26, 2026
16414a0
test(repository): assert Gin flow prerequisites explicitly
cmahmud Aug 26, 2026
881ffad
fix(repository): preserve Gin framework identity during route dedupe
cmahmud Aug 26, 2026
54c9498
fix(repository): exclude Gin Query accessor from database sink evidence
cmahmud Aug 26, 2026
b122c1f
test(repository): distinguish Gin Query source from lexical sink coll…
cmahmud Aug 26, 2026
7c9bd74
fix(repository): integrate Gin request flow into aggregate analysis
cmahmud Aug 26, 2026
c993454
test(repository): cover aggregate Gin request flow
cmahmud Aug 26, 2026
13764f9
docs(repository): document aggregate Gin request flow
cmahmud Aug 26, 2026
e881c93
feat(repository): add bounded Gin local request forwarding
cmahmud Aug 26, 2026
9207fdb
chore(repository): export Gin request forwarding
cmahmud Aug 26, 2026
853b5f0
feat(repository): compose bounded Gin local forwarding
cmahmud Aug 26, 2026
7e35ed7
test(repository): cover bounded Gin local forwarding
cmahmud Aug 26, 2026
520d32b
docs(repository): document bounded Gin local forwarding
cmahmud Aug 26, 2026
f0b6025
feat(repository): add bounded Koa request input flow
cmahmud Aug 26, 2026
45df251
refactor(repository): preserve Koa route identity
cmahmud Aug 26, 2026
27f6fb3
build(repository): export Koa request input flow
cmahmud Aug 26, 2026
f0e3a2f
feat(repository): integrate Koa request flow analysis
cmahmud Aug 26, 2026
0fb1ef4
test(repository): cover Koa request input flow
cmahmud Aug 26, 2026
17132ff
docs(repository): document Koa request flow boundary
cmahmud Aug 26, 2026
2bcd721
fix(repository): resolve imported strict Koa handlers
cmahmud Aug 26, 2026
8aed817
fix(repository): distinguish Koa response body from request input
cmahmud Aug 26, 2026
e6dd0ac
docs(repository): clarify Koa request source semantics
cmahmud Aug 26, 2026
7a46d48
test(repository): reject Koa response body as request source
cmahmud Aug 26, 2026
59d772b
fix(repository): reject generic database sink collisions in Koa flow
cmahmud Aug 26, 2026
e82fb71
test(repository): validate Koa flow bounds directly
cmahmud Aug 26, 2026
54f6e89
feat(repository): add bounded Koa local request forwarding
cmahmud Aug 26, 2026
83a28ca
feat(repository): export Koa request forwarding analysis
cmahmud Aug 26, 2026
d70ea39
feat(repository): integrate Koa local forwarding
cmahmud Aug 26, 2026
4b02312
test(repository): cover Koa local request forwarding
cmahmud Aug 26, 2026
729f8d9
docs(repository): document bounded Koa forwarding evidence
cmahmud Aug 26, 2026
0ab2cb0
feat(ops): add bounded file-backed host secret source
cmahmud Aug 26, 2026
2bf1bfa
feat(ops): allow file-backed postgres credential for intake
cmahmud Aug 26, 2026
6b31711
feat(ops): allow file-backed postgres credential for worker
cmahmud Aug 26, 2026
ca46156
test(ops): cover file-backed host secret boundary
cmahmud Aug 26, 2026
3db315f
feat(ops): add hardened intake service example
cmahmud Aug 26, 2026
5d1dc32
feat(ops): add hardened worker service example
cmahmud Aug 26, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
64 changes: 59 additions & 5 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -9,22 +9,76 @@ permissions:
contents: read

jobs:
build:
build-and-test:
strategy:
fail-fast: false
matrix:
node: [20, 24]
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v7

- name: Set up Node.js
uses: actions/setup-node@v4
- name: Set up Node.js ${{ matrix.node }}
uses: actions/setup-node@v7
with:
node-version: 24
node-version: ${{ matrix.node }}
package-manager-cache: false

- name: Install dependencies
run: npm install

- name: Build
run: npm run build

- name: Typecheck
run: npm run typecheck

- name: Test
run: npm test

- name: Release readiness assessment
run: npm run release:check

postgres-shared-state:
runs-on: ubuntu-latest
services:
postgres:
image: postgres:16-alpine
env:
POSTGRES_DB: synsec
POSTGRES_USER: synsec
POSTGRES_PASSWORD: synsec-ci-only
ports:
- 5432:5432
options: >-
--health-cmd="pg_isready -U synsec -d synsec"
--health-interval=5s
--health-timeout=5s
--health-retries=10
env:
SYNSEC_TEST_POSTGRES_URL: postgresql://synsec:synsec-ci-only@127.0.0.1:5432/synsec
steps:
- name: Checkout
uses: actions/checkout@v7

- name: Set up Node.js 24
uses: actions/setup-node@v7
with:
node-version: 24
package-manager-cache: false

- name: Install dependencies
run: npm install

- name: Build
run: npm run build

- name: PostgreSQL shared-state, ownership, and canonical conformance
run: node --test --test-concurrency=1 tests/postgres-shared-state.test.mjs tests/postgres-shared-state-conformance.test.mjs tests/postgres-shared-backend.test.mjs tests/postgres-lease-observer.test.mjs tests/postgres-hosted-installation-ownership.test.mjs

- name: Enforced OCI scanner sandbox integration
run: |
OCI_IMAGE="$(docker image inspect postgres:16-alpine --format '{{index .RepoDigests 0}}')"
test -n "$OCI_IMAGE"
SYNSEC_TEST_OCI_IMAGE="$OCI_IMAGE" node --test tests/oci-scanner-sandbox.test.mjs
Loading