All pull requests

Pull requests

• ci(high/easy): set a short retention period for CI evidence artifacts

  #422·CemAyyildiz opened Oct 22, 2026Contributor·

  ·
  1

  1

• ci(high/easy): pin Slither installation with hashes

  #421·CemAyyildiz opened Oct 22, 2026Contributor·

  ·
  1

  1

• ci(high/easy): verify release tags match package version

  #420·CemAyyildiz opened Oct 22, 2026Contributor·

  ·
  1

  1

• ci(high/easy): run environment documentation drift checks in CI

  #419·CemAyyildiz opened Oct 22, 2026Contributor·

  ·
  1

  1

• ci(contracts): install Foundry once before Slither

  #418·Caneryy opened Oct 22, 2026Contributor·1 of 2 tasks·

  ·
  1

  1

• ci(soroban): install Stellar CLI once at the pinned release

  #417·Caneryy opened Oct 22, 2026Contributor·1 of 2 tasks·

  ·
  1

  1

• ci(soroban): drop the temporary cargo tree diagnostic

  #416·Caneryy opened Oct 22, 2026Contributor·1 of 2 tasks·

  ·
  1

  1

• fix(ci): bound the container release job timeout

  #415·Caneryy opened Oct 22, 2026Contributor·1 of 2 tasks·

  ·
  1

  1

• ci(release): upload a resolver image SBOM

  #414·chainsmt opened Oct 22, 2026·2 of 4 tasks·

  ·
  1

  1

• Block resolver image publication on high and critical vulnerabilities

  #413·chainsmt opened Oct 22, 2026·2 of 4 tasks·

  ·
  1

  1

• ci(release): record pushed image digest in the job summary

  #412·chainsmt opened Oct 22, 2026·7 of 8 tasks·

  ·
  1

  1

• ci(release): serialize builds for the same tag

  #411·chainsmt opened Oct 22, 2026·

  ·
  1

  1

• Run resolver and relayer containers as an unprivileged user

  #410·eulami opened Oct 22, 2026·45 tasks·

  ·
  1

  1

• Make the evidence link checker blocking in CI

  #409·JerryOJJ opened Oct 22, 2026·

  ·
  1

  1

• Add relayer Docker build context exclusions

  #408·emirykl opened Oct 22, 2026Contributor·

  ·
  1

  1

• edited

  #407·akinerin opened Oct 22, 2026·

  ·
  1

  1

• Add resolver Docker ignore rules

  #406·emirykl opened Oct 22, 2026Contributor·

  ·
  1

  2

• edited readme

  #365·akinerin opened Oct 22, 2026·

  ·
  1

  1

• ci: declare least-privilege token permissions in non-release workflows

  #364·Blessed-Femi opened Oct 22, 2026Contributor·4 tasks done·

  ·
  1

  2

• ci: pin workflow actions to commit SHAs and add weekly Dependabot

  #363·Aycode01 opened Oct 22, 2026Contributor·12 of 22 tasks·

  ·
  2

  2

• Reject duplicate env keys in env.example (#355)

  #362·classikdev opened Oct 22, 2026·

  ·
  1

  2

• chore: add root CODEOWNERS policy for sensitive paths

  #361·Akinloluwa20 opened Oct 21, 2026·

  ·
  1

  2

• ci: enforce frozen pnpm lockfile in every CI install

  #360·Ajibose opened Oct 21, 2026Contributor·7 tasks done·

  ·
  1

  2

• feat(ci): add static repository malware guard

  #359·Ajibose opened Oct 21, 2026Contributor·6 tasks done·

  ·
  1

  2

• chore: tighten VS Code editor-file policy and add runOn:folderOpen check

  #358·EniolaTrev opened Oct 21, 2026·

  ·
  1

  2