All pull requests

Pull requests

• fix(sbom): revert Hermeto attribution requirement

  bugready-for-mergerisk/moderatesize: XL
  #1950·joejstuart opened Oct 29, 2026Contributor·

  ·
  3

• docs(#1946): add undefined-propagation checklist to AGENTS.md

  documentationready-for-reviewrequires-manual-reviewrisk/moderatesize: XS
  #1948·fullsend-ai-coder[bot] opened Oct 28, 2026Bot·4 tasks done·

  ·
  1

  6

• Bring back local handling of coverage output

  ready-for-mergerisk/lowsize: XStooling
  #1940·simonbaird opened Oct 26, 2026Member·

  ·
  10

• Update step-security/harden-runner action to v2.22.2 (main)

  github_actionsmainrenovaterisk/moderatesize: XS
  #1934·renovate[bot] opened Oct 25, 2026Bot·1 task·

  ·
  11

• chore(#1931): skip review agent for Renovate bot PRs

  ready-for-reviewrenovaterequires-manual-reviewrisk/lowsize: XS
  #1932·fullsend-ai-coder[bot] opened Oct 24, 2026Bot·3 tasks done·

  ·
  1

  7

• 🚨 Update dependency ubuntu to v26 (main)

  github_actionsmainmajorrenovaterisk/moderatesize: XS
  #1928·renovate[bot] opened Oct 22, 2026Bot·1 task·

  ·
  9

• Update github actions (main)

  dependenciesgithub_actionsmainrenovaterisk/moderatesize: XS
  #1927·renovate[bot] opened Oct 22, 2026Bot·1 task·

  ·
  18

• Update module github.com/sigstore/sigstore-go to v1.2.1 [SECURITY] (release-v0.8)

  ready-for-mergerelease-v0.8renovaterisk/moderatesize: XS
  #1899·renovate[bot] opened Oct 13, 2026Bot·1 task·

  ·
  9

• Update module github.com/moby/buildkit to v0.31.1 [SECURITY] (release-v0.8)

  dependenciesgoready-for-mergerelease-v0.8renovaterisk/moderatesize: XS
  #1898·renovate[bot] opened Oct 13, 2026Bot·1 task·

  ·
  11

• Update module github.com/google/cel-go to v0.29.0 [SECURITY] (release-v0.8)

  dependenciesgoready-for-mergerelease-v0.8renovaterisk/lowsize: XS
  #1897·renovate[bot] opened Oct 13, 2026Bot·1 task·

  ·
  7

• Update module github.com/sigstore/rekor to v1.5.2 [SECURITY] (release-v0.8)

  dependenciesgoready-for-mergerelease-v0.8renovaterisk/moderatesize: XL
  #1894·renovate[bot] opened Oct 13, 2026Bot·1 task·

  ·
  18

• Update module github.com/sigstore/rekor to v1.5.2 [SECURITY] (release-v0.7) - abandoned

  dependenciesgoready-for-mergerelease-v0.7renovaterisk/moderatesize: XXL
  #1889·renovate[bot] opened Oct 13, 2026Bot·1 task·

  ·
  12

• Update module github.com/moby/buildkit to v0.31.1 [SECURITY] (release-v0.7) - abandoned

  dependenciesgorelease-v0.7renovaterisk/moderatesize: XXL
  #1888·renovate[bot] opened Oct 13, 2026Bot·1 task·

  ·
  13

• Update module github.com/sigstore/sigstore-go to v1.2.1 [SECURITY] (main)

  dependenciesgomainready-for-mergerenovaterisk/moderatesize: M
  #1880·renovate[bot] opened Oct 13, 2026Bot·1 task·

  ·
  7

• Update module github.com/moby/buildkit to v0.31.1 [SECURITY] (main)

  dependenciesgomainready-for-mergerenovaterisk/moderatesize: XL
  #1879·renovate[bot] opened Oct 13, 2026Bot·1 task·

  ·
  8

• Update module github.com/google/cel-go to v0.29.0 [SECURITY] (main)

  dependenciesgomainready-for-mergerenovaterisk/moderatesize: XS
  #1877·renovate[bot] opened Oct 13, 2026Bot·1 task·

  ·
  6

• Update module github.com/sigstore/rekor to v1.5.2 [SECURITY] (main)

  dependenciesgomainready-for-mergerenovaterisk/moderatesize: XS
  #1875·renovate[bot] opened Oct 13, 2026Bot·1 task·

  ·
  24

• Remove PRIVILEGED_NESTED deny rule from buildah_build_task

  size: L
  #1869·redhat-chai-bot opened Oct 8, 2026Contributor·

  ·
  15

• fix: pin compatible Fullsend workflows

  size: XS
  #1864·jsmid1 opened Sep 30, 2026Contributor·

  ·
  5

• Grandfather pre-cutoff builds across trusted task checks

  size: XL
  #1862·joejstuart opened Sep 29, 2026Contributor·

  ·
  2

• docs(#1853): guardrail for acceptance shims reusing production packages

  ready-for-reviewsize: L
  #1854·fullsend-ai-coder[bot] opened Sep 15, 2026Bot·3 tasks done·

  ·
  1

  3

• Update go modules (release-v0.8) (minor)

  dependenciesgoready-for-mergerelease-v0.8renovaterisk/moderatesize: XXL
  #1839·renovate[bot] opened Sep 6, 2026Bot·1 task·

  ·
  53

• feat: add yum repository RPM verification policy

  documentationfeatureready-for-mergesize: XL
  #1814·yuvalk opened Aug 16, 2026·6 tasks done·

  ·
  27

• docs(#1811): add enforcement-delegation parity check to review checklist

  documentationrequires-manual-reviewsize: XS
  #1812·fullsend-ai-coder[bot] opened Aug 13, 2026Bot·3 tasks done·

  ·
  1

  5

• docs(#1808): add THREAT_MODEL.md to change checklist for trust-boundary mods

  documentationrequires-manual-reviewsize: XS
  #1809·fullsend-ai-coder[bot] opened Aug 13, 2026Bot·3 tasks done·

  ·
  1

  6