jschoubben ce9dc8e157 Run no hook and no signature setting when a check makes its merge ...

A build machine's or a clone's git configuration must not run code or change
the merge a check judges (novox/hq ADR 0323).

2026-10-12 17:39:59 +02:00

..

testdata/issue460

Name what failed in a repository check from its whole output, not its tail (issue 460)

2026-10-11 04:24:34 +02:00

binary_name_test.go

A compiled artifact names the binary a machine will run

2026-09-30 11:41:23 +02:00

build_source_test.go

Say a build source only for the trunk's head, and hold what C, assembly and a new go.mod reach (hq ADR 0267, review)

2026-10-10 03:11:06 +02:00

builder_test.go

Keep the forge credential out of what a check's container sees, and redact what a check publishes (issue 462)

2026-10-11 11:20:10 +02:00

builder.go

Let an archive be an upstream release pinned by URL and sha256, mirrored by the build seat (hq issue 345, ADR 0316)

2026-10-12 13:51:35 +02:00

bundle_test.go

A TypeScript bundle is one file per entrypoint, bundled in the toolchain (hq ADR 0193); a toolchain follows the SDK it stands on (hq issue 212)

2026-10-03 23:24:08 +02:00

check_base_test.go

Judge a pull request by the base branch's merge-check.sh, not its own copy

2026-10-08 10:58:19 +02:00

check_base.go

Judge a pull request by the base branch's merge-check.sh, not its own copy

2026-10-08 10:58:19 +02:00

check_credential_test.go

Leave no package-registry credential or clone userinfo in the workspace a check mounts (issue 462)

2026-10-11 11:24:58 +02:00

check_merge_test.go

Run no hook and no signature setting when a check makes its merge

2026-10-12 17:39:59 +02:00

check_merge.go

Run no hook and no signature setting when a check makes its merge

2026-10-12 17:39:59 +02:00

check_test.go

Raise a check's store without durability and remove what earlier holders left (hq issue 306)

2026-10-08 10:20:28 +02:00

check.go

Judge a pull request's head merged into its trunk, and name the trunk commit

2026-10-12 17:27:01 +02:00

context_test.go

A definition names no installation: the check, an operator's value, a context on the git seat

2026-09-30 18:38:06 +02:00

dependencies_test.go

A TypeScript bundle installs its module's own packages before it is compiled

2026-10-04 01:17:49 +02:00

dependencies.go

A TypeScript bundle installs its module's own packages before it is compiled

2026-10-04 01:17:49 +02:00

failures_test.go

Name what failed in a repository check from its whole output, not its tail (issue 460)

2026-10-11 04:24:34 +02:00

failures.go

Name what failed in a repository check from its whole output, not its tail (issue 460)

2026-10-11 04:24:34 +02:00

go_toolchain_test.go

The mesh can compile Go, which is why nothing delivered the host

2026-09-30 09:48:50 +02:00

gosource_test.go

Hold a cgo file's directory whole: its preamble may include from below it (hq ADR 0267, review)

2026-10-10 03:20:35 +02:00

gosource.go

Hold a cgo file's directory whole: its preamble may include from below it (hq ADR 0267, review)

2026-10-10 03:20:35 +02:00

kill_test.go

Raise a check's store without durability and remove what earlier holders left (hq issue 306)

2026-10-08 10:20:28 +02:00

kill.go

Raise a check's store without durability and remove what earlier holders left (hq issue 306)

2026-10-08 10:20:28 +02:00

launchers_test.go

Beside every TypeScript entrypoint the builder writes an executable launcher; the runtime is told it (hq ADR 0193)

2026-10-03 21:07:07 +02:00

local.go

The builder builds one module and stops, with no broker and no registry

2026-09-13 03:24:10 +02:00

mirror_shared_test.go

Let platform manifests go only on a confirmed collect, and copy again what a sweep took

2026-10-08 15:47:42 +02:00

mirror_test.go

Let platform manifests go only on a confirmed collect, and copy again what a sweep took

2026-10-08 15:47:42 +02:00

mirror.go

Say a registry came back only when the call worked, and retry from toRetry's set (issue 457 review)

2026-10-11 11:05:30 +02:00

packages_test.go

Leave no package-registry credential or clone userinfo in the workspace a check mounts (issue 462)

2026-10-11 11:24:58 +02:00

packages.go

The builder resolves the SDK from the mesh registry, and can publish packages

2026-09-16 10:27:26 +02:00

redact.go

Keep the forge credential out of what a check's container sees, and redact what a check publishes (issue 462)

2026-10-11 11:20:10 +02:00

registry_test.go

Hold every kept archive by a manifest so the store's collector keeps it (hq issue 253)

2026-10-05 18:13:23 +02:00

registry_wait_test.go

Wait out a registry held still, for up to five minutes, instead of failing the build (issue 457)

2026-10-11 10:51:41 +02:00

registry_wait.go

Say a registry came back only when the call worked, and retry from toRetry's set (issue 457 review)

2026-10-11 11:05:30 +02:00

registry.go

Wait out a registry held still, for up to five minutes, instead of failing the build (issue 457)

2026-10-11 10:51:41 +02:00

replay310_test.go

Judge a pull request by the base branch's merge-check.sh, not its own copy

2026-10-08 10:58:19 +02:00

replay341_test.go

Judge a pull request's head merged into its trunk, and name the trunk commit

2026-10-12 17:27:01 +02:00

source_test.go

Read a rebuild of an unchanged source as no move, whatever image digest it made (hq issue 280)

2026-10-06 22:09:11 +02:00

source.go

Say a build source only for the trunk's head, and hold what C, assembly and a new go.mod reach (hq ADR 0267, review)

2026-10-10 03:11:06 +02:00

standing_on_test.go

Record the bases a build copies, keep them by the builds that stood on them, and copy each image once

2026-10-08 15:47:42 +02:00

system_stamp_test.go

The linker is told once, not twice

2026-09-30 12:54:29 +02:00

toolchain_test.go

One module, several languages, each bundle packed alone

2026-09-15 02:09:06 +02:00

toolchain.go

A TypeScript bundle installs its module's own packages before it is compiled

2026-10-04 01:17:49 +02:00

upstream_file_test.go

Judge an upstream pin's host like any name, and harden the upstream unpack (review 35, hq issue 345)

2026-10-12 13:51:35 +02:00

upstream_file.go

Judge an upstream pin's host like any name, and harden the upstream unpack (review 35, hq issue 345)

2026-10-12 13:51:35 +02:00