Grant Whitmer

windyadmin pushed to main at windyadmin/windy-git

2026-09-24 07:07:39 +00:00

ea02ade0cb weekly public secret scan (all 5 GitHub accounts, full history, hash-only)

497222094f secret-guard: triaged allow list (fakes by hash, test PEMs by path)

Compare 2 commits »

windyadmin pushed to main at windyadmin/windy-git

2026-09-24 07:02:39 +00:00

d28da26000 secret-guard: no live credentials in bridged repos (hash-only findings)

windyadmin pushed to main at windyadmin/windy-git

2026-09-24 06:42:38 +00:00

04c857654a rerun_ci.sh: find wg-q in the invoking user home under sudo

windyadmin pushed to main at windyadmin/windy-git

2026-09-24 00:51:32 +00:00

32512a32fc bridge windy-inbox (new private repo; Windy Drops is build lead)

windyadmin pushed to main at windyadmin/windy-git

2026-09-24 00:18:02 +00:00

b52e6b4784 bridge: post no-Docker smoke jobs (name regex skipped "no Docker")

windyadmin pushed to main at windyadmin/windy-git

2026-09-24 00:08:02 +00:00

6440c7d5f4 deploy: compute-guard BLOCK drop-in (live on Veron since 09-24 00:0xZ)

17acae6af6 guards: Grant-owned findings never block (compute-guard + ci-hygiene)

Compare 2 commits »

windyadmin pushed to main at windyadmin/windy-git

2026-09-23 23:53:01 +00:00

790d794900 bridge: drop eternitas ci/build from BRIDGE_NO_DAEMON (converted to ci/smoke, #179)

1b8cebbfe1 branding: friendly invite-only page instead of Gitea's raw Registration is disabled

Compare 2 commits »

windyadmin pushed to main at windyadmin/windy-git

2026-09-23 23:13:00 +00:00

83fbf1f992 guards_report: chat lane is now the Windy Chat session

9b5334fee7 test: allow-list entries must be line-scoped (replaces is-empty check)

f71a5aab39 ci-hygiene allow: windy-pro disabled deploy job (needs-docker false positive)

f219437282 ci-hygiene report: same disabled-workflow filter as check()

b15584d33a ci-hygiene: needs-docker skips workflows disabled on Windy Git

Compare 6 commits »

windyadmin pushed to main at windyadmin/windy-git

2026-09-23 23:02:58 +00:00

8b1ae4ac60 branding: home page says invite only (forge registration closed at launch)

windyadmin pushed to main at windyadmin/windy-git

2026-09-23 22:47:58 +00:00

14ed23a9fe guards_report: owner-lane column (session names: 8c -> Windy Hub, calendar -> Windy Calender)

windyadmin pushed to main at windyadmin/windy-git

2026-09-23 21:32:55 +00:00

c4799dcc13 ci: mount windy-pro's read-only build inputs into dind; allow exactly that path for jobs

windyadmin pushed to main at windyadmin/windy-git

2026-09-23 21:22:54 +00:00

683c01ec7d rerun_ci: Gitea stores repos lowercased on disk (WindyCloud failed)

windyadmin pushed to main at windyadmin/windy-git

2026-09-23 20:17:54 +00:00

4bb4893131 bridge: replace the mirror PR when a GitHub PR is retargeted to another base

windyadmin pushed to main at windyadmin/windy-git

2026-09-23 19:47:54 +00:00

9e9eb08d96 compute guard: line-scoped allow entries; allow MindKeychain.jsx's two OAuth endpoints only

dece301bf0 grant-owned: windy-pro ROOT .env.example (desktop BYOK dev fallback; hub reads neither)

Compare 2 commits »

windyadmin pushed to main at windyadmin/windy-git

2026-09-23 19:42:54 +00:00

87dcddb87d guards_report: one live status page for compute-guard + ci-hygiene

windyadmin pushed to main at windyadmin/windy-git

2026-09-23 19:37:56 +00:00

a5f7b036a8 guards: skip a commit the sync hasn't fetched yet, quietly (race, not error)

windyadmin pushed to main at windyadmin/windy-git

2026-09-23 19:32:54 +00:00

255aa58b35 ci-hygiene guard: lockfile-only installs, pinned images, no host-port services (warn-only)

windyadmin pushed to main at windyadmin/windy-git

2026-09-23 19:27:53 +00:00

e64a1b5fcb deps: install from uv.lock (hash-pinned) in the image and CI, never floating

windyadmin pushed to ci-inputs-mount at windyadmin/windy-git

2026-09-23 18:57:50 +00:00

a2daca61ef ci: mount windy-pro's read-only build inputs into dind; allow exactly that path for jobs

windyadmin created branch ci-inputs-mount in windyadmin/windy-git

2026-09-23 18:57:50 +00:00