Skip to content

fix(cache): retain tool events in runner diagnostics - #62

Merged
rldyourmnd merged 1 commit into
mainfrom
fix/tool-cache-diagnostic-pin
Aug 25, 2026
Merged

fix(cache): retain tool events in runner diagnostics#62
rldyourmnd merged 1 commit into
mainfrom
fix/tool-cache-diagnostic-pin

Conversation

@rldyourmnd

Copy link
Copy Markdown
Contributor

Summary

  • update all consolidated security-bundle tool fetches to signed github-actions v1.0.1
  • bind the catalog to exact commit 470c95c3e7cd1f9a0d763f3f6d7f43024f8451ad
  • retain each verified fetch event inside the ephemeral runner diagnostic bundle

Permissions diff

None.

Threat model

The action writes only validated source/result/digest/size/duration fields. It never writes credentials, URLs, repository identities, or arbitrary action input. Nonstandard hosted runners without a safe _diag directory remain fail-open.

Verification

  • isolated core validator
  • generated docs check
  • actionlint
  • zizmor 1.26.1 pedantic with authenticated online audits

Signed-off-by: rldyourmnd <danil@nddev.it.com>
@github-actions github-actions Bot added ci and removed ci labels Aug 25, 2026
@rldyourmnd
rldyourmnd merged commit ea30a2b into main Aug 25, 2026
28 checks passed
@rldyourmnd
rldyourmnd deleted the fix/tool-cache-diagnostic-pin branch August 25, 2026 01:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant