jschoubben 39a2144cd6 Run a step's command shut off in bubblewrap, so a change's code reaches no key, login or network (issue 1309, S17, ADR 0448) ...

buildstep.Isolation and Isolated: its own namespaces with only a loopback, an
environment of exactly what the step is given, the system and toolchain read-only,
the workspace writable, and no home, key, bus login, runtime directory or name service.

2026-10-22 17:45:21 +02:00

..

testdata

Restore the full tar stream of Pack's golden (issue 1479)

2026-10-20 20:39:23 +00:00

fetch_integration_test.go

Test the fetch of one commit over SSH (issue 1474), part 6 of 7

2026-10-20 20:06:12 +00:00

fetch_test.go

Test the fetch of one commit over SSH (issue 1474), part 6 of 7

2026-10-20 20:06:12 +00:00

fetch.go

Lay out a build module's long steps, guard its toolchain and fetch one commit over SSH (issues 1471, 1473, 1474), part 4 of 7

2026-10-20 20:05:21 +00:00

guard_test.go

Test the step runner and the toolchain guard (issues 1471, 1473), part 5 of 7

2026-10-20 20:05:49 +00:00

guard.go

Lay out a build module's long steps, guard its toolchain and fetch one commit over SSH (issues 1471, 1473, 1474), part 4 of 7

2026-10-20 20:05:21 +00:00

isolate_test.go

Run a step's command shut off in bubblewrap, so a change's code reaches no key, login or network (issue 1309, S17, ADR 0448)

2026-10-22 17:45:21 +02:00

isolate.go

Run a step's command shut off in bubblewrap, so a change's code reaches no key, login or network (issue 1309, S17, ADR 0448)

2026-10-22 17:45:21 +02:00

launchers_test.go

Share the launcher rule of a TypeScript bundle, so builder and controller name it alike (R4e, the lead's request for dev-r4e-controller)

2026-10-22 17:25:21 +02:00

launchers.go

Share the launcher rule of a TypeScript bundle, so builder and controller name it alike (R4e, the lead's request for dev-r4e-controller)

2026-10-22 17:25:21 +02:00

merge_integration_test.go

Keep the unit level cheap: the merge's real-git tests start processes, so they are integration tests; the places tests wait 10 ms, not 50 (issue 895)

2026-10-21 19:26:02 +02:00

merge_test.go

Keep the unit level cheap: the merge's real-git tests start processes, so they are integration tests; the places tests wait 10 ms, not 50 (issue 895)

2026-10-21 19:26:02 +02:00

merge.go

Put the merge of a head onto a trunk commit into go/buildstep, so both build modules' fetch steps call one function and none copies the controller's (issue 1674)

2026-10-21 19:22:33 +02:00

pack_test.go

Compare Pack's tar stream with the build agent's, since gzip's bytes differ between Go versions (issue 1479)

2026-10-20 20:38:47 +00:00

pack_unix_test.go

Pack a build's output like the build agent and keep the steps state's shape (issues 1471, 1479), part 7 of 7

2026-10-20 20:06:48 +00:00

pack.go

Pack a build's output like the build agent and keep the steps state's shape (issues 1471, 1479), part 7 of 7

2026-10-20 20:06:48 +00:00

refusal.go

Lay out a build module's long steps, guard its toolchain and fetch one commit over SSH (issues 1471, 1473, 1474), part 4 of 7

2026-10-20 20:05:21 +00:00

request_test.go

Hand a build's fetch the named paths in a shared request, so no build module reads them from a manifest (issue 1758, ADR 0499 §4, ADR 0495 §1)

2026-10-22 17:29:58 +02:00

request.go

Hand a build's fetch the named paths in a shared request, so no build module reads them from a manifest (issue 1758, ADR 0499 §4, ADR 0495 §1)

2026-10-22 17:29:58 +02:00

step_test.go

Test the step runner and the toolchain guard (issues 1471, 1473), part 5 of 7

2026-10-20 20:05:49 +00:00

step.go

Lay out a build module's long steps, guard its toolchain and fetch one commit over SSH (issues 1471, 1473, 1474), part 4 of 7

2026-10-20 20:05:21 +00:00

trees_integration_test.go

Prove on real git that a Go-only commit leaves mesh-sdk's package tree equal (issue 1758, S5, ADR 0499 §2 check)

2026-10-22 17:30:25 +02:00

trees_named_test.go

Narrow the merge preview's tree of a module that names its paths (issue 1758, S4, ADR 0499 §2)

2026-10-22 17:29:17 +02:00

trees_test.go

Put the module trees of a merge into go/buildstep for both fetch steps, and let a preview name the conflicts of a head that does not merge (issues 1675, 1676, 1445)

2026-10-21 21:21:48 +02:00

trees.go

Narrow the merge preview's tree of a module that names its paths (issue 1758, S4, ADR 0499 §2)

2026-10-22 17:29:17 +02:00