thekidneyexperts/autoresearch-mcp
Watch
4
0
Fork
You've already forked autoresearch-mcp
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

ci(security): block Gitleaks findings introduced by pull requests #20

Open
shree-mulay wants to merge 1 commit from ci/gitleaks-block-new-findings into main
pull from: ci/gitleaks-block-new-findings
merge into: thekidneyexperts:main
Conversation 1 Commits 1 Files changed 1 +64
shree-mulay commented 2026-10-10 19:33:19 -05:00
Owner

Rollout of root renderer change ai_projects#435 (owner decision D3), piloted on tke-directory#6/#7. Additive only: adds a blocking, redacted PR-range Gitleaks scan; the full-tree scan stays advisory. Pre-existing findings do not block.

Rollout of root renderer change ai_projects#435 (owner decision D3), piloted on tke-directory#6/#7. Additive only: adds a blocking, redacted PR-range Gitleaks scan; the full-tree scan stays advisory. Pre-existing findings do not block.
ci(security): block Gitleaks findings introduced by pull requests
Some checks failed
Forgejo Actions CI / node22 (pull_request) Successful in 17s
Details
Forgejo Actions CI / node24 (pull_request) Successful in 16s
Details
Security Scanning / security (pull_request) Successful in 23s
Details
Forgejo Actions CI / bun (pull_request) Failing after 56s
Details
Forgejo Actions CI / package_smoke (pull_request) Has been skipped
Details
Forgejo Actions CI / ci (pull_request) Failing after 2s
Details
ee81d4f115
shree-mulay commented 2026-10-11 11:52:46 -05:00
Author
Owner

Held: the security.yml change is additive only and the security job passes. CI fails at the pre-existing bun audit step (10 newly published advisories, 1 critical, e.g. proxy-addr via @modelcontextprotocol/sdk > express). The bun suite passes locally (272/272). Needs a dependency update before this can merge.

Held: the security.yml change is additive only and the security job passes. CI fails at the pre-existing bun audit step (10 newly published advisories, 1 critical, e.g. proxy-addr via @modelcontextprotocol/sdk > express). The bun suite passes locally (272/272). Needs a dependency update before this can merge.
Some checks failed
Forgejo Actions CI / node22 (pull_request) Successful in 17s
Details
Forgejo Actions CI / node24 (pull_request) Successful in 16s
Details
Security Scanning / security (pull_request) Successful in 23s
Details
Forgejo Actions CI / bun (pull_request) Failing after 56s
Details
Forgejo Actions CI / package_smoke (pull_request) Has been skipped
Details
Forgejo Actions CI / ci (pull_request) Failing after 2s
Required
Details
Some required checks were not successful.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin 'ci/gitleaks-block-new-findings:ci/gitleaks-block-new-findings'
git switch 'ci/gitleaks-block-new-findings'
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
thekidneyexperts/autoresearch-mcp!20
No description provided.