pre-commit

Workflow runs for pre-commit

• sec(purchase): pin the approval token in the token approve/cancel CAS…

  completed successfully:
  pre-commit#1958:Commit2033cb8pushedbycristim
  main

  Oct 25, 20264m 33s
  More actions for workflow run 1958

• chore(iac): derive the CFN issuer host, create the GCP signing key first, read the dev Function URL from state

  completed successfully:
  pre-commit#1957:Pull request#1312synchronizebyIAmJSD
  IAmJSD:fix/issue-324

  Oct 25, 20264m 16s
  More actions for workflow run 1957

• fix(purchase): alert on failed fan-out roots and every terminal-failu…

  completed successfully:
  pre-commit#1956:Commitbfb4625pushedbycristim
  main

  Oct 25, 20263m 46s
  More actions for workflow run 1956

• fix(api): validate registration credentials and GCP WIF endpoint URLs

  completed successfully:
  pre-commit#1955:Pull request#1414openedbyIAmJSD
  IAmJSD:fix/credential-validation

  Oct 25, 20264m 43s
  More actions for workflow run 1955

• sec(deps): record dated Trivy ignores for the unfixable docker and openpgp advisories

  completed successfully:
  pre-commit#1954:Pull request#1193synchronizebyIAmJSD
  IAmJSD:fix/issue-3

  Oct 25, 202614m 19s
  More actions for workflow run 1954

• docs(iac): stop documenting profile tfvars that terraform ignores

  completed successfully:
  pre-commit#1953:Pull request#1151synchronizebyIAmJSD
  IAmJSD:fix/issue-58

  Oct 25, 202611m 44s
  More actions for workflow run 1953

• fix(api): report unrestricted account access on /auth/me/permissions

  completed successfully:
  pre-commit#1952:Pull request#1155synchronizebyIAmJSD
  IAmJSD:fix/issue-619

  Oct 25, 202610m 4s
  More actions for workflow run 1952

• sec(iac/azure): detect nested Key Vault access_policy blocks with an HCL parse

  completed successfully:
  pre-commit#1951:Pull request#1303synchronizebyIAmJSD
  IAmJSD:fix/issue-204

  Oct 25, 202613m 30s
  More actions for workflow run 1951

• ci: single-source the gosec version in .gosec-version

  completed successfully:
  pre-commit#1950:Pull request#1227synchronizebyIAmJSD
  IAmJSD:fix/issue-347

  Oct 25, 202620m 54s
  More actions for workflow run 1950

• feat(frontend): wire Azure RI exchange preview and execute UI

  completed successfully:
  pre-commit#1949:Pull request#1325synchronizebyIAmJSD
  IAmJSD:ui/issue-81

  Oct 25, 202619m 37s
  More actions for workflow run 1949

• refactor(provider): build credentialed Azure/GCP providers through the registry

  completed successfully:
  pre-commit#1948:Pull request#1310synchronizebyIAmJSD
  IAmJSD:fix/issue-41

  Oct 25, 202615m 39s
  More actions for workflow run 1948

• fix(iac/azure): let the runtime identity write the admin-password secret, and log sync failures as errors

  completed successfully:
  pre-commit#1947:Pull request#1309synchronizebyIAmJSD
  IAmJSD:fix/issue-199

  Oct 25, 202613m 42s
  More actions for workflow run 1947

• fix(credentials): pin stored GCP credential JSON types, drop deprecated CredentialsFromJSON

  completed successfully:
  pre-commit#1946:Pull request#1308synchronizebyIAmJSD
  IAmJSD:fix/issue-80

  Oct 25, 202611m 10s
  More actions for workflow run 1946

• chore(iac): remove the unused roleAssignmentGuidPrefix ARM parameter

  completed successfully:
  pre-commit#1945:Pull request#1306synchronizebyIAmJSD
  IAmJSD:fix/issue-143

  Oct 25, 20266m 26s
  More actions for workflow run 1945

• fix(ci): fail Azure deploys on unreadable terraform outputs and show logs after a failed health check

  completed successfully:
  pre-commit#1944:Pull request#1304synchronizebyIAmJSD
  IAmJSD:fix/issue-438

  Oct 25, 20266m 2s
  More actions for workflow run 1944

• sec(iac): narrow three hosted-infra least-privilege grants (GCP CI trust ref, rotation RDS ARN, Cloud Run compute reads)

  completed successfully:
  pre-commit#1943:Pull request#1290synchronizebyIAmJSD
  IAmJSD:fix/issue-323

  Oct 25, 20264m 29s
  More actions for workflow run 1943

• fix(exchange): show unknown-outcome auto-exchanges as needing reconciliation in the notification email

  completed successfully:
  pre-commit#1942:Pull request#1278synchronizebyIAmJSD
  IAmJSD:fix/issue-1055

  Oct 25, 20263m 39s
  More actions for workflow run 1942

• fix(iac): require PostgreSQL 15+ in every environment's version input

  completed successfully:
  pre-commit#1941:Pull request#1255synchronizebyIAmJSD
  IAmJSD:fix/issue-1233

  Oct 25, 20263m 45s
  More actions for workflow run 1941

• fix(ladder): floor tranche amounts to the stored scale instead of rounding them up

  completed successfully:
  pre-commit#1940:Pull request#1199synchronizebyIAmJSD
  IAmJSD:fix/issue-1182

  Oct 25, 20264m 33s
  More actions for workflow run 1940

• fix(server): pin the rate-limiter cleanup start in reinitializeAfterC…

  completed successfully:
  pre-commit#1939:Commit8f186a8pushedbyIAmJSD
  main

  Oct 25, 202610m 4s
  More actions for workflow run 1939

• test(iacfiles): find Terraform IAM statements without a Sid (#1214)

  completed successfully:
  pre-commit#1938:Commit0e3ffa6pushedbyIAmJSD
  main

  Oct 25, 20269m 24s
  More actions for workflow run 1938

• fix(iac/aws): list every attached policy in the ci-cd-permissions pol…

  completed successfully:
  pre-commit#1937:Commit16e718cpushedbyIAmJSD
  main

  Oct 25, 20269m 9s
  More actions for workflow run 1937

• sec(ci): refuse authoritative GCP IAM policies in the secret scope gu…

  completed successfully:
  pre-commit#1936:Commitcc132fbpushedbyIAmJSD
  main

  Oct 25, 20265m 48s
  More actions for workflow run 1936

• fix(recommendations): key stored recs, rec ID and purchase identity on RDS az_config (#408)

  completed successfully:
  pre-commit#1935:Pull request#1239synchronizebyIAmJSD
  IAmJSD:fix/issue-408

  Oct 25, 20268m 23s
  More actions for workflow run 1935

• fix(iac): bound every Terraform provider constraint below the next ma…

  completed successfully:
  pre-commit#1934:Commit2374b4epushedbycristim
  main

  Oct 25, 202610m 1s
  More actions for workflow run 1934