Repository navigation
fix(ci): correct unused staged audit executable hash - #1055
Merged
Merged
Conversation
⏱ Benchmark Resultsbenchstat comparison (baseline → PR)
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Correct the unused staged CI37b executable entry to the exact frozen audit mutation-suite SHA. The only source change is
.github/public-workflow-executable-allowlist.jsonrow 5:scripts/test-audit-cloud-symbols.shchanges fromc34e9750to42322514. All twelve entries, other properties/order and modes remain fixed.Task7 starts from accepted Task22 main
e822d03835d200d8b1afc311cd7967cac65e94be. Source head284960fd2d9087e98d392307998e0ce715fb7581and the PR synthetic merge share treef2cf2b8673c3347f162928f1b665535c93431f19; all 3,526 other tracked rows are conserved. The five Task8 audit inputs remain frozen and uninstalled, with adoption kept in its separate owning boundary.Validation: Linux Go1.26.5 CI passes all 152 packages, all eight capability fixtures and the real live Docker sandbox; cmd/wfctl finishes in 578.380s. The full core/guard/mutation harness, canonical trusted policy on Go1.27.2, lint/build/UI/config checks, differential official OSV scan and CodeQL/quality checks pass. Native Mac Go1.27.1 passes 117 future AST cases, the current-root contract, 18 legacy drift controls, trusted E-only/inert-composite scans, full core/guard/harness and isolated lint using the existing compatible golangci-lint2.14 builtGo1.27.0. Mac proof does not substitute Linux compiler or real cloud/runtime acceptance.
The initial Mac outer-wrapper cutoff, offline public-metadata cache failures and incompatible default-linter failure remain recorded; completing the same source tests used the established allowance, approved checksum-verified standard-cache metadata preload and previously recorded compatible binary. No source/assertion/private-cache/global-tool change or failure waiver follows. Two committed-source reviews report C0/I0/A0; completed own-PR review supplements are retained separately.
The benchmark's performance-regression failure is retained as B14 advisory only. Known full-main OSV findings/incomplete analysis and the earlier actual-main live-sandbox failure remain visible. No security-clean, vulnerability-fix, source1022, stable-release, deployment or Compute runtime acceptance is claimed by this PR.