jochen b0c4b849a7 Judge an upstream pin's host like any name, and harden the upstream unpack (review 35, hq issue 345) ...

The url was skipped by the installation check, so an installation's host or
an address passed; it is judged whole now, the vendor's host declared in the
artifact's names-on-purpose, and an address or a reserved name as the host
is refused. Only the version's dotted-quad reading is skipped. The unpack
caps its entries, drains xz before waiting for it, reads a pax global
header and a nested within's parents, and a redirect off https is not
followed.

2026-10-12 13:51:35 +02:00

..

testdata/issue460

Name what failed in a repository check from its whole output, not its tail (issue 460)

2026-10-11 04:24:34 +02:00

binary_name_test.go

A compiled artifact names the binary a machine will run

2026-09-30 11:41:23 +02:00

build_source_test.go

Say a build source only for the trunk's head, and hold what C, assembly and a new go.mod reach (hq ADR 0267, review)

2026-10-10 03:11:06 +02:00

builder_test.go

Keep the forge credential out of what a check's container sees, and redact what a check publishes (issue 462)

2026-10-11 11:20:10 +02:00

builder.go

Let an archive be an upstream release pinned by URL and sha256, mirrored by the build seat (hq issue 345, ADR 0316)

2026-10-12 13:51:35 +02:00

bundle_test.go

A TypeScript bundle is one file per entrypoint, bundled in the toolchain (hq ADR 0193); a toolchain follows the SDK it stands on (hq issue 212)

2026-10-03 23:24:08 +02:00

check_base_test.go

Judge a pull request by the base branch's merge-check.sh, not its own copy

2026-10-08 10:58:19 +02:00

check_base.go

Judge a pull request by the base branch's merge-check.sh, not its own copy

2026-10-08 10:58:19 +02:00

check_credential_test.go

Leave no package-registry credential or clone userinfo in the workspace a check mounts (issue 462)

2026-10-11 11:24:58 +02:00

check_test.go

Raise a check's store without durability and remove what earlier holders left (hq issue 306)

2026-10-08 10:20:28 +02:00

check.go

Leave no package-registry credential or clone userinfo in the workspace a check mounts (issue 462)

2026-10-11 11:24:58 +02:00

context_test.go

A definition names no installation: the check, an operator's value, a context on the git seat

2026-09-30 18:38:06 +02:00

dependencies_test.go

A TypeScript bundle installs its module's own packages before it is compiled

2026-10-04 01:17:49 +02:00

dependencies.go

A TypeScript bundle installs its module's own packages before it is compiled

2026-10-04 01:17:49 +02:00

failures_test.go

Name what failed in a repository check from its whole output, not its tail (issue 460)

2026-10-11 04:24:34 +02:00

failures.go

Name what failed in a repository check from its whole output, not its tail (issue 460)

2026-10-11 04:24:34 +02:00

go_toolchain_test.go

The mesh can compile Go, which is why nothing delivered the host

2026-09-30 09:48:50 +02:00

gosource_test.go

Hold a cgo file's directory whole: its preamble may include from below it (hq ADR 0267, review)

2026-10-10 03:20:35 +02:00

gosource.go

Hold a cgo file's directory whole: its preamble may include from below it (hq ADR 0267, review)

2026-10-10 03:20:35 +02:00

kill_test.go

Raise a check's store without durability and remove what earlier holders left (hq issue 306)

2026-10-08 10:20:28 +02:00

kill.go

Raise a check's store without durability and remove what earlier holders left (hq issue 306)

2026-10-08 10:20:28 +02:00

launchers_test.go

Beside every TypeScript entrypoint the builder writes an executable launcher; the runtime is told it (hq ADR 0193)

2026-10-03 21:07:07 +02:00

local.go

The builder builds one module and stops, with no broker and no registry

2026-09-13 03:24:10 +02:00

mirror_shared_test.go

Let platform manifests go only on a confirmed collect, and copy again what a sweep took

2026-10-08 15:47:42 +02:00

mirror_test.go

Let platform manifests go only on a confirmed collect, and copy again what a sweep took

2026-10-08 15:47:42 +02:00

mirror.go

Say a registry came back only when the call worked, and retry from toRetry's set (issue 457 review)

2026-10-11 11:05:30 +02:00

packages_test.go

Leave no package-registry credential or clone userinfo in the workspace a check mounts (issue 462)

2026-10-11 11:24:58 +02:00

packages.go

The builder resolves the SDK from the mesh registry, and can publish packages

2026-09-16 10:27:26 +02:00

redact.go

Keep the forge credential out of what a check's container sees, and redact what a check publishes (issue 462)

2026-10-11 11:20:10 +02:00

registry_test.go

Hold every kept archive by a manifest so the store's collector keeps it (hq issue 253)

2026-10-05 18:13:23 +02:00

registry_wait_test.go

Wait out a registry held still, for up to five minutes, instead of failing the build (issue 457)

2026-10-11 10:51:41 +02:00

registry_wait.go

Say a registry came back only when the call worked, and retry from toRetry's set (issue 457 review)

2026-10-11 11:05:30 +02:00

registry.go

Wait out a registry held still, for up to five minutes, instead of failing the build (issue 457)

2026-10-11 10:51:41 +02:00

replay310_test.go

Judge a pull request by the base branch's merge-check.sh, not its own copy

2026-10-08 10:58:19 +02:00

source_test.go

Read a rebuild of an unchanged source as no move, whatever image digest it made (hq issue 280)

2026-10-06 22:09:11 +02:00

source.go

Say a build source only for the trunk's head, and hold what C, assembly and a new go.mod reach (hq ADR 0267, review)

2026-10-10 03:11:06 +02:00

standing_on_test.go

Record the bases a build copies, keep them by the builds that stood on them, and copy each image once

2026-10-08 15:47:42 +02:00

system_stamp_test.go

The linker is told once, not twice

2026-09-30 12:54:29 +02:00

toolchain_test.go

One module, several languages, each bundle packed alone

2026-09-15 02:09:06 +02:00

toolchain.go

A TypeScript bundle installs its module's own packages before it is compiled

2026-10-04 01:17:49 +02:00

upstream_file_test.go

Judge an upstream pin's host like any name, and harden the upstream unpack (review 35, hq issue 345)

2026-10-12 13:51:35 +02:00

upstream_file.go

Judge an upstream pin's host like any name, and harden the upstream unpack (review 35, hq issue 345)

2026-10-12 13:51:35 +02:00