fix: pin scorecard action to valid upstream commit #3781
KooshaPari
wants to merge
254 commits into
tailcallhq:main
from
KooshaPari:preserve/workflow-schema-wave-20260729
chore: update stale workflow
2fdbc96a
ci: add trufflehog secrets scan
a13e2795
docs: add CODEOWNERS
0ca21daa
ci: add FUNDING.yml
e3225497
docs: add CONTRIBUTING.md and SECURITY.md
f04b643a
Add CHANGELOG.md scaffolding
2658d360
docs: trim README to 169 lines, add fork preamble
b6e8c02a
docs: trim README to 169 lines, add fork preamble (#5)
406bc646
ci(cargo-deny): add workflow_dispatch trigger, fix double-tag checkout
208dce5c
chore: bump version to 0.1.1 (#6)
1d7024f5
chore: commit untracked infrastructure files
4a97dce0
ci: pin all GitHub Actions SHA [org-bootstrap-2026-05-03]
2d0cd6d4
fix(cargo-deny): remove stale RUSTSEC-2026-0049 ignore (#7)
864dd7cc
fix(cargo-deny): ignore unmaintained transitive advisories with ratio…
9c1ef522
fix(cargo-deny): ignore unmaintained transitive advisories with ratio…
6100def7
fix(forgecode): update compact history handling
8fd7740f
fix(forge_main): suppress cursor position timeout errors on exit
fb623a19
feat(forgecode): add LLM summarization for compaction
e20a527a
security(ci): replace trufflehog/actions/setup with go install + setu…
ebd253b4
fix(forgecode): restore workspace members list
c14fe20c
chore: add cargo-deny bans config and update workflows
da8df12b
fix(forgecode): restore workspace members
1e757df6
fix(workflows): use pull_request instead of pull_request_target
b2b63830
chore: add omniroute benchmark plan
bfbfba7f
chore(forgecode): add packageManager field
9bdfc163
fix(rust): tighten deny.toml wildcards policy in forgecode
1b59732a
Merge upstream/main into main
93761b2a
Merge fork commit 6100def72 into synced main
c2bfb2bc
chore(forgecode): shell-script hygiene (#14)
598cc3a2
chore(forgecode): align editorconfig with org standard (#16)
be8425bf
ci: add release workflow with tag triggers, build, test, and crates.i…
62e209ab
chore(forgecode): align version drift (#17)
8c91ed68
chore(forgecode): add standard CODEOWNERS (#15)
7411096d
chore(gitignore): adopt shared node template from phenotype-tooling (…
ba9b6b82
feat(session-viewer): hide subagent sessions, add FTS5 search, pagina…
70e43e7a
wip: pre-push snapshot 2026-06-18T02:00:13Z from wrap-up session
c462519e
feat(forgecode): perf-v2 — dirty tracking, drop guard, FTS5 search, b…
f4d300b9
feat(forgecode): v3 — :reparent/:cwd commands, sort UI, cwd+message_c…
eb1e886c
feat(forgecode): v4 — :reparent/:cwd commands, sort UI, ConversationS…
345fb706
fix(forge_app,forge_repo): add new Conversation fields to test fixtures
d31e9186
chore(ci): regenerate workflows via gh-workflow-gen
66d61600
feat(config): document OutputMode in schema + chore(docs): L7 stub re…
1c91f6e1
fix(forgecode): v4-ux P0 reactivity — kill stale background tasks, Ar…
20500730
fix(forgecode): v4-ux P0 reactivity — kill stale background tasks, Ar…
708849c8
feat(forgecode): status bar — Claude-style context/tokens/tools/last-…
ccf325a2
fix(forge): non-TTY stdin no longer hangs; re-point auto-update to Ko…
aff6aed6
feat(forgecode): compress tool output to 3 lines with expand hint (#29)
95a9d1e0
feat(forgecode): ASCII color coding + symbol per tool type (#30)
85a24d1b
feat(forgecode): promote subagent tool discovery to top-level system …
953cced5
fix: resolve persistent 'database is locked' in shared .forge.db (P1+…
5a85a2b8
feat(forgecode): wire refresh_fts_index into background cadence (P2a)…
476fa624
feat(forgecode): configurable WAL checkpointer + ctrl_c graceful flus…
21dd884e
feat(P2b): external-content FTS5 migration + query rewrites (#36)
4e3e8663
feat(forgecode): intent-gated semantic pruning — state machine + sche…
528d4292
Merge upstream/main: resolve conflicts per UNION intents
11f72d25
fix: add ConversationTree handler to ui.rs match statement
b6ffe90d
feat(forge_dbd): single-writer daemon scaffold — collapse N:1 SQLite …
05b7c534
test(forge_repo): add comprehensive test suite for P1/P2/P2b/P4 merge…
e66cf4d5
feat(tooling): forge-session-cleaner — classifier + safe gated delete…
596669b5
feat: transparent zstd compression of context blobs (lossless) (#40)
fe1a62f7
feat: auto_vacuum=INCREMENTAL + periodic incremental_vacuum (#41)
fb118c9f
feat(tooling): forge-context-backfill — batch-compress existing rows …
7753b946
feat(forge_main): polish conv-view UX + wire FTS search & sort into s…
8cf33aea
feat(forge): CC parity — /clear /init /rewind commands with full infr…
73771f20
feat(forgecode): absorb 5 pheno crates + drift wiring + ZSH hooks + s…
ba6090a6
fix(forge_select): debounce preview rendering to 150ms to avoid per-k…
39f7dc47
fix(ci): unblock CI pipeline — fix cargo-deny action + setup-go SHA p…
22a89e01
feat(forge): add /review, /test, /think CC parity commands + debounce…
5802046c
feat(forge): subagent breadcrumb — '↳' prefix for conversations with …
8e67a7f4
feat(forge): subagent breadcrumb 'spawned by X' in info panel + conv …
536bb23b
feat(forge): add :fts-optimize command — FTS5 index maintenance
8654a3fc
feat(forge): add :fts-optimize command — FTS5 index maintenance
6dfd1975
fix(security): redact secrets in Debug (ApiKey/AuthCredential/OAuth t…
d46243e9
docs(audit): forgecode overhaul deep-audit + phased DAG WBS roadmap (…
c4614353
feat(p0): de-fork doc/governance surface to Rust-first (#50)
789f2708
chore(crates): remove dead ghostty-kit + clarify forge_dbd WIP status…
c243d648
fix(stubs): implement openai http_delete + make NoopIntentExtractor a…
86388f5f
fix(p1): redact device-code secrets + dedup update bots (#52)
132dea48
feat(p2): forge_dbd health probe + graceful drain on shutdown (#53)
21f2fbc5
fix(p2): cancellable/bounded async task lifecycle (FTS loop, forge3d …
082c0b0b
feat(p2): metrics facade + tracing spans on hot paths (#55)
8d3e09ae
feat(p2): unify retry on RetryConfig + add circuit breaker & bulkhead…
95e265af
ci(p1): blocking fmt+clippy+test gates (Linux) (#57)
db097a6e
docs(p4): STRIDE threat model + ops runbook/SLO/postmortem (#58)
e04a6180
fix(p3): remove runtime set_var + fix MCP TOCTOU + document unsafe (#59)
2a01d21c
feat(p3): criterion bench spine + jemalloc/mimalloc allocator + bound…
7c23c9cd
feat(p5): consolidate 3x internal SSE stop-signal + provider-model co…
75614dfc
feat(p5): OAuth + resilience contract specs (provider-models) (#64)
25005114
chore(contracts): pin to KooshaPari/phenotype-contracts SSOT + confor…
c3372a0b
docs: agentic-coding-CLI SOTA research dossier + competitor matrix (#67)
65e54aa6
fix(security): default-deny policy engine + opt-in redacted telemetry…
0346be25
perf(forge_repo): lite conversation-list query — fixes 3GB+ RAM (#71)
17d95c37
docs(packaging): forge-dev installer + CLI spec (#72)
e0cee4ae
perf(update): skip GitHub update check in CI/agent-mode; default freq…
43731794
perf(alloc): linux-gate jemalloc; use mimalloc on macOS (ARM64 bug #2…
45e10739
feat(maintenance): add 'forge maintenance compress' for zstd backfill…
b56b88df
feat(daemon): Zig forge-daemon (kqueue+posix_spawn+task-ring) for den…
6a479b2a
feat(repo-map): tree-sitter repository structure map (#73)
6f8f80a3
chore: upstream diff analysis report (#70)
aefcabc2
chore(perf): baseline measurement (per-agent RSS / idle CPU / system-…
2484fa8e
chore: cross-fleet hygiene sweep (#69)
a14b7f75
feat(repo-map): tree-sitter repo map + forge3d CLI + similarity hash-…
edd84c2a
feat(forge-tui): wire forge_tui TUI dashboard crate into workspace (#80)
465542ac
feat(packaging): forge-dev binary + install guide (T18) (#81)
5b5f8438
chore(forge3d): polish CLI help text — add about/doc strings to all c…
5f6e6210
chore(sync): integrate upstream tailcallhq/forgecode (32 commits) (#83)
c0ad2a3e
feat(publish): add cargo-dist-style release pipeline for forge-dev (#84)
71c6a7a4
feat(brand): add Terminal-Forge golden icon set (vision-pillar L96) (…
2947254f
docs(readme): inject centered brand icon + tagline (L104) (#88)
4a76d200
feat(brand): L101 motion polish — animated SVG variant (#89)
4aff1f62
docs(identity): L105 animated demo media (SVG + MP4 + README) (#90)
ca824ff3
feat(forge_display): Terminal-Forge palette → theme.rs (Phenotype-org…
4e993ddb
docs(readme): L107 — link to visual identity demo (L105 ladder close)…
f5fc938d
audit(v38): forgecode C03 scorecard — Agent Readiness (18/36, D) (#85)
22206333
renames(helioslite): publish-surface rename + provenance docs + relea…
9d67435d
feat(forge_infra): L133 cross-pollination — backoff + cyclic_check + …
3df15401
fix: per-provider error resilience and /providers remove TUI command
69f83e96
ci: fix release workflow heredoc indentation
d7bc2cda
feat(gpu): add forge_gpu GpuLane for heterogeneous CUDA routing (#95)
3e7cb777
ci: harden workflows and unblock checks
5c9d92c8
ci: fix rust-cache action pin
562093ea
ci: use pinned trufflehog action
81bb0df1
ci: repair pinned action shas
f250836a
ci: fix trufflehog image tag
14e1d293
ci: restore deny and nextest commands
8d5418ce
ci: install zig for workspace builds
e6fa43c6
chore: preserve local forgecode work
a540d2e0
ci: gate forge daemon zig core
5e373262
fix: preserve update fallback result handling
f06a456c
fix: repair perf harness linux build
c1a39b25
perf: fast-path zsh rprompt
39fb1192
fix: parse theme hex without string slicing
8edbc9b2
fix: satisfy strict string safety lints
75ec697e
chore: preserve forgecode workflow and generated state
965d831b
fix: satisfy ci clippy in perf harness
e2385019
chore: preserve forgecode workspace fixes
c34802bb
ci: make autofix workflow verify only
b182e542
ci: format fork gpu lane crate
2ca85620
Merge remote-tracking branch 'fork/main' into fix/workflow-indent
3fa49a5b
chore: preserve forge info formatting
aa329b82
ci: align autofix and schema gates
3056ea7e
test: canonicalize generated schema
5c824396
Merge pull request #96 from KooshaPari/fix/workflow-indent
7422a3e3
fix: gate forge3d unix sockets on windows
fa5a7dfc
fix: gate forge3d daemon on unix
f7b7b9cd
fix: preserve forge3d cli metadata on windows
4ebc842e
feat(dual-harness): shared-3task.v1 process_smoke adapter
8a6b095e
chore: update Cargo.lock for dual_harness workspace member
41f1c0a1
Merge pull request #98 from KooshaPari/feat/dual-harness-shared-3task
11889d48
fix: clear forge3d windows release warnings
8e8efab4
Merge remote-tracking branch 'fork/main' into fix/windows-release-for…
e3d5a9cb
fix: align dual harness with ci lint
4948c81c
fix: vendor dual harness fixture for ci
e13d79b1
Merge pull request #97 from KooshaPari/fix/windows-release-forge3d
fd171421
fix: gate forge daemon unix sockets on windows (#99)
c84b1e6c
fix: repair winterminal windows release compile (#100)
7567a594
fix: report helioslite package version
5796c89b
Merge pull request #101 from KooshaPari/fix/helioslite-version-brandi…
2c20fd48
fix: keep forge main cli tests compiling
20f844ba
fix: keep forge main cli tests compiling (#102)
f238e4f9
Merge remote-tracking branch 'fork/main' into fix/per-provider-error-…
a3cb940a
fix: satisfy provider resilience clippy
296be1d1
fix: per-provider error resilience and provider removal (#94)
9f2c2015
chore: trigger main CI after merge train
38332bdf
docs: record forgecode merge train
58c3512f
fix: gate forge tui unix sockets on windows
79c08fe8
fix: gate forge dbd unix sockets on windows
9f599be0
fix: silence forge dbd windows unix-gate warnings
336318b7
ci: install protoc for nightly and attestation
425daf02
fix: align installers with fork release artifacts
016130ab
ci: use supported artifact provenance action
14116a0c
ci: enable dev binary feature in nightly
31b27dbd
ci: add scorecard workflow for quality gating
290a3125
chore(ci): harden github workflows and add fork scorecard/sast coverage
9a76738a
ci: fix workflow yaml needs indentation
e9b1d4eb
fix(spinner): suppress ANSI output when stderr is not a terminal
43268fb4
chore: add bench/ to .gitignore
b7007fff
ci: add Mergify auto-merge rules
6410d196
ci: add Trunk.io lint/format config
c883fd07
ci: add CircleCI parallel pipeline
0c1ffa4e
feat(compaction): add configurable compression and importance-based p…
db286f09
fix: integrate compaction strategies across providers
db0c4800
ci: make generated lint and release gates runnable
d957f564
style: satisfy workspace formatting and clippy
8bf0e004
wip(repo): preserve workspace conversation query
11c99c3f
feat(compaction): add AI-driven compression and semantic pruning
55e65827
chore: preserve workspace conversation query support
e7aa5b5c
fix(ui): adjust stream renderer for compaction integration
9611099f
chore(ui): expose workspace conversation scope
1ed5446a
chore(api): thread workspace conversation scope
2fc24ba5
fix(repo): preserve typed conversation summary selection
bb53128d
fix: propagate lightweight conversation workspace scope
5aca6145
fix: propagate lightweight conversation workspace scope
5b49d770
fix(env): make workspace hashes deterministic
7c0271a7
Merge branch 'chore/preserve-workspace-conversation-query'
b01fb134
fix: use deterministic hash builder API
52288fa3
fix: avoid unchecked compaction indexing
0279fe64
chore(ci): regenerate release workflow manifests
8c463ac6
ci: refresh generated release workflow
80ace82f
style: format compaction bounds check
3666eaac
ci: rerun canonical release gates
4d3d80b5
ci: compare generated workflows semantically
68aa2e4e
build: lock workflow yaml parser
230970ef
chore: refresh forge config schema
fd99999d
ci: harden scorecard and add fuzz smoke
1c9d07ff
ci: repair Mergify workflow syntax
10e2c985
ci: remove obsolete Mergify rules
33d5c2a8
fix: update plist XML parser dependencies
7bc16b3d
ci: pin CodeQL and attestation actions
10736e61
fix: refresh dependency SBOMs and remove vulnerable DNS stack
2f1b3a95
fix: remove unsupported hickory DNS configuration
4326cbe3
fix: scope release drafter write permissions
0b70bcc0
fix: upgrade workflow generator dependencies
5e9ec7af
fix: replace unmaintained fnv_rs dependency
273c52b4
fix: refresh configuration schema after DNS removal
588b44c6
fix: migrate forge dbd protocol to bincode 2
91ae0ee2
chore: configure Renovate dependency updates
c00e4114
fix: remove non-actionable Mergify automation
92455e5e
fix: replace direct deprecated yaml dependency
96b811d4
style: format yaml policy test
fdab9e10
fix: remove unused embedding and clipboard image features
b37e076d
ci: harden Scorecard and add fuzz smoke (#105)
958ad865
fix: use modern AWS HTTPS client
eeeeaca1
fix: grant release drafter label permission
a1703485
fix: skip fork auto-labeling
b1c5bf36
fix: pin scorecard action to valid upstream commit
3c94b430
chore: retrigger ci after scorecard pin update
dd591a1e
ci: update .mergify.yml
f0684f3f
ci: update .github/workflows/ci.yml
53b30c78
ci: update .github/workflows/trunk-check.yml
5ad53c52
ci: update .github/workflows/scorecard.yml
f8dcc303
ci: update .github/stale.yml
9d6d5fa9
ci: update .trunk/trunk.yaml
0f767e37
ci: update renovate.json
aa4397e7
ci: update .pre-commit-config.yaml
2a125999
ci: skip release-drafter labels for fork PR branches
e301d3e8
ci: run release-drafter autolabeler only on push
8bf81ebc
ci: disable release-drafter autolabeler in fork PR checks
ed0eec83
ci: remove release-drafter autolabeler step
1f039b80
merge main into pr106 dependency hardening
c55c97df
ci: refresh generated workflows after merge
a33d8ef7
ci: remove fork-incompatible release labeling and repair trunk pin
be967dc6
ci: disable release drafter autolabeler
38b506a7
ci: pin trunk action to verified revision
406f0f13
ci: replace legacy trunk config with rust gates
03945226
ci: refresh generated workflow
2f971d72
ci: quote workflow output paths
f5e89194
ci: refresh generated release workflow
60fb0a75
ci: repair generated workflows
348ee524
merge promoted CI repairs into pr106
77b52160
Reviewers
No reviews
Assignees
No one assigned
Labels
state: inactive
type: fix
type: provider
Milestone
No milestone
Login to write a write a comment.
Login via GitHub