From e7a7e8d65a35f6cc92191722282e6c58c2404fd3 Mon Sep 17 00:00:00 2001 From: Sandeep Kumar Date: Wed, 22 Jul 2026 22:47:01 +0530 Subject: [PATCH 1/4] docs: add kriya to community projects kriya is an on-device AI agent governance tool with deny-by-default egress control, secret scanning, and signed offline-verifiable audit records. It works with Claude Code and other MCP-based agents. GitHub: https://github.com/sandeepshekhar26/kriya-console --- docs/community-projects.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/community-projects.md b/docs/community-projects.md index a177ad01..bdacc744 100644 --- a/docs/community-projects.md +++ b/docs/community-projects.md @@ -36,6 +36,7 @@ Self-hostable servers that implement the MCP Registry API specification. - [mcp-registry-cli](https://pypi.org/project/mcp-registry-cli/) - CLI tool to navigate the MCP registry servers - [OtherVibes/mcp-publish-action](https://github.com/OtherVibes/mcp-publish-action) - GitHub Action for publishing MCP servers to the official registry - [polygraph](https://polygraph.so) - Independent behavioral security grades (A–F) for MCP servers from an open, reproducible harness, published as an adoption-ranked index with per-server reports +- [kriya](https://github.com/sandeepshekhar26/kriya-console) - On-device AI agent governance with deny-by-default egress control, secret scanning, and signed offline-verifiable audit records for Claude Code and other agents ## Adding Your Project From eddb35914ca1202be2da50eab11606b97f18934a Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 23 Jul 2026 13:48:03 +0530 Subject: [PATCH 2/4] fix(ci): disable go cache in build job to prevent govulncheck tar errors The govulncheck step was failing due to cache restoration errors (tar: Cannot open: File exists). Disabling caching in the build-lint-validate job isolates it from cache corruption while keeping cache enabled in the tests job for performance. Co-Authored-By: Claude Haiku 4.5 --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 54a49421..328f3b71 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -22,7 +22,7 @@ jobs: uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 with: go-version: 'stable' - cache: true + cache: false - name: Run lint uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a From 340f2f8d333f7cdd122ea71e39b43f379a88dd29 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 24 Jul 2026 12:28:38 +0530 Subject: [PATCH 3/4] Revert "fix(ci): disable go cache in build job to prevent govulncheck tar errors" This reverts commit eddb35914ca1202be2da50eab11606b97f18934a. --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 328f3b71..54a49421 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -22,7 +22,7 @@ jobs: uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 with: go-version: 'stable' - cache: false + cache: true - name: Run lint uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a From 2cb4033f6f1c3f513f38fe233111c65c62bf3861 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 24 Jul 2026 12:30:31 +0530 Subject: [PATCH 4/4] fix(deps): bump golang.org/x/text to v0.39.0 for GO-2026-5970 govulncheck (CI 'Build, Lint, and Validate' job) fails with exit code 3 because golang.org/x/text@v0.37.0 is affected by GO-2026-5970 (infinite loop on invalid input), reachable via auth.DefaultHTTPKeyFetcher.FetchKey -> http.Client.Do. Fixed in x/text v0.39.0. Co-Authored-By: Claude Opus 4.8 --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 1a76501f..143912fd 100644 --- a/go.mod +++ b/go.mod @@ -75,7 +75,7 @@ require ( golang.org/x/oauth2 v0.36.0 // indirect golang.org/x/sync v0.21.0 // indirect golang.org/x/sys v0.46.0 // indirect - golang.org/x/text v0.37.0 // indirect + golang.org/x/text v0.39.0 // indirect golang.org/x/time v0.15.0 // indirect google.golang.org/api v0.274.0 // indirect google.golang.org/genproto v0.0.0-20260319201613-d00831a3d3e7 // indirect diff --git a/go.sum b/go.sum index da5fd167..3dc632ab 100644 --- a/go.sum +++ b/go.sum @@ -173,8 +173,8 @@ golang.org/x/sync v0.21.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0= golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw= golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= -golang.org/x/text v0.37.0 h1:Cqjiwd9eSg8e0QAkyCaQTNHFIIzWtidPahFWR83rTrc= -golang.org/x/text v0.37.0/go.mod h1:a5sjxXGs9hsn/AJVwuElvCAo9v8QYLzvavO5z2PiM38= +golang.org/x/text v0.39.0 h1:UbZz4pLOvn600D6Oh6GGEI6VAmndrEBLv8/6BEXzyus= +golang.org/x/text v0.39.0/go.mod h1:3UwRclnC2g0TU9x8PZiyfOajCd1zaUNHF9cvqcQZ+ZM= golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U= golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno= gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=