jschoubben 5c4fa43f8b Leave no package-registry credential or clone userinfo in the workspace a check mounts (issue 462) ...

A build wrote .npmrc into its source tree and never removed it, and its clone
recorded the URL's userinfo; a later check's container mounts the workspace as
HOME. The .npmrc and the tree now go when the build ends, clones record their
URL without userinfo, and a check first removes any .npmrc an older builder left.

2026-10-11 11:24:58 +02:00

..

testdata/issue460

Name what failed in a repository check from its whole output, not its tail (issue 460)

2026-10-11 04:24:34 +02:00

binary_name_test.go

A compiled artifact names the binary a machine will run

2026-09-30 11:41:23 +02:00

build_source_test.go

Say a build source only for the trunk's head, and hold what C, assembly and a new go.mod reach (hq ADR 0267, review)

2026-10-10 03:11:06 +02:00

builder_test.go

Keep the forge credential out of what a check's container sees, and redact what a check publishes (issue 462)

2026-10-11 11:20:10 +02:00

builder.go

Leave no package-registry credential or clone userinfo in the workspace a check mounts (issue 462)

2026-10-11 11:24:58 +02:00

bundle_test.go

A TypeScript bundle is one file per entrypoint, bundled in the toolchain (hq ADR 0193); a toolchain follows the SDK it stands on (hq issue 212)

2026-10-03 23:24:08 +02:00

check_base_test.go

Judge a pull request by the base branch's merge-check.sh, not its own copy

2026-10-08 10:58:19 +02:00

check_base.go

Judge a pull request by the base branch's merge-check.sh, not its own copy

2026-10-08 10:58:19 +02:00

check_credential_test.go

Leave no package-registry credential or clone userinfo in the workspace a check mounts (issue 462)

2026-10-11 11:24:58 +02:00

check_test.go

Raise a check's store without durability and remove what earlier holders left (hq issue 306)

2026-10-08 10:20:28 +02:00

check.go

Leave no package-registry credential or clone userinfo in the workspace a check mounts (issue 462)

2026-10-11 11:24:58 +02:00

context_test.go

A definition names no installation: the check, an operator's value, a context on the git seat

2026-09-30 18:38:06 +02:00

dependencies_test.go

A TypeScript bundle installs its module's own packages before it is compiled

2026-10-04 01:17:49 +02:00

dependencies.go

A TypeScript bundle installs its module's own packages before it is compiled

2026-10-04 01:17:49 +02:00

failures_test.go

Name what failed in a repository check from its whole output, not its tail (issue 460)

2026-10-11 04:24:34 +02:00

failures.go

Name what failed in a repository check from its whole output, not its tail (issue 460)

2026-10-11 04:24:34 +02:00

go_toolchain_test.go

The mesh can compile Go, which is why nothing delivered the host

2026-09-30 09:48:50 +02:00

gosource_test.go

Hold a cgo file's directory whole: its preamble may include from below it (hq ADR 0267, review)

2026-10-10 03:20:35 +02:00

gosource.go

Hold a cgo file's directory whole: its preamble may include from below it (hq ADR 0267, review)

2026-10-10 03:20:35 +02:00

kill_test.go

Raise a check's store without durability and remove what earlier holders left (hq issue 306)

2026-10-08 10:20:28 +02:00

kill.go

Raise a check's store without durability and remove what earlier holders left (hq issue 306)

2026-10-08 10:20:28 +02:00

launchers_test.go

Beside every TypeScript entrypoint the builder writes an executable launcher; the runtime is told it (hq ADR 0193)

2026-10-03 21:07:07 +02:00

local.go

The builder builds one module and stops, with no broker and no registry

2026-09-13 03:24:10 +02:00

mirror_shared_test.go

Let platform manifests go only on a confirmed collect, and copy again what a sweep took

2026-10-08 15:47:42 +02:00

mirror_test.go

Let platform manifests go only on a confirmed collect, and copy again what a sweep took

2026-10-08 15:47:42 +02:00

mirror.go

Let platform manifests go only on a confirmed collect, and copy again what a sweep took

2026-10-08 15:47:42 +02:00

packages_test.go

Leave no package-registry credential or clone userinfo in the workspace a check mounts (issue 462)

2026-10-11 11:24:58 +02:00

packages.go

The builder resolves the SDK from the mesh registry, and can publish packages

2026-09-16 10:27:26 +02:00

redact.go

Keep the forge credential out of what a check's container sees, and redact what a check publishes (issue 462)

2026-10-11 11:20:10 +02:00

registry_test.go

Hold every kept archive by a manifest so the store's collector keeps it (hq issue 253)

2026-10-05 18:13:23 +02:00

registry.go

Hold every kept archive by a manifest so the store's collector keeps it (hq issue 253)

2026-10-05 18:13:23 +02:00

replay310_test.go

Judge a pull request by the base branch's merge-check.sh, not its own copy

2026-10-08 10:58:19 +02:00

source_test.go

Read a rebuild of an unchanged source as no move, whatever image digest it made (hq issue 280)

2026-10-06 22:09:11 +02:00

source.go

Say a build source only for the trunk's head, and hold what C, assembly and a new go.mod reach (hq ADR 0267, review)

2026-10-10 03:11:06 +02:00

standing_on_test.go

Record the bases a build copies, keep them by the builds that stood on them, and copy each image once

2026-10-08 15:47:42 +02:00

system_stamp_test.go

The linker is told once, not twice

2026-09-30 12:54:29 +02:00

toolchain_test.go

One module, several languages, each bundle packed alone

2026-09-15 02:09:06 +02:00

toolchain.go

A TypeScript bundle installs its module's own packages before it is compiled

2026-10-04 01:17:49 +02:00