Commits

history of .gitbay/wiki/Threat-Model.org

• runner: secrets with newlines reach the container through podman's environment

  cmc · 2026-09-10 02:58 UTC

  success Verified · cmc dab7e0ad06

• wiki: runners attached to repositories

  cmc · 2026-09-09 03:24 UTC

  Verified · cmc f9845abbc9

• runner, deploy, wiki: a build home per repository, and caps on the runner unit

  cmc · 2026-09-07 18:47 UTC

  success Verified · cmc 0caaaedf8f

• deploy, wiki: ProtectKernelTunables=no so a container can mount proc

  cmc · 2026-09-07 01:27 UTC

  failure Verified · cmc 7d675c19a7

• runner, deploy, wiki: images are provisioned, never pulled by a build

  cmc · 2026-09-07 00:27 UTC

  failure Verified · cmc 44c2c11f58

• deploy, wiki: NoNewPrivileges=no so rootless podman can start

  cmc · 2026-09-06 23:26 UTC

  failure Verified · cmc d6632e706a

• runner, ci, store, wiki: run build steps in a rootless podman container

  cmc · 2026-09-06 21:52 UTC

  success Verified · cmc 76668f2f38

• runner, wiki: give builds a home that outlives the build

  cmc · 2026-09-06 21:46 UTC

  success Verified · cmc 3d2795d9c2

• runner, wiki: construct the step environment instead of inheriting it

  cmc · 2026-09-06 18:44 UTC

  success Verified · cmc 3f7409ca2e

• wiki: record what the security sweep did not cover

  cmc · 2026-09-06 18:32 UTC

  success Verified · cmc aeedf75018

• notify, web, wiki: log dead-lettered mail by queue row, not recipient

  cmc · 2026-09-06 18:13 UTC

  success Verified · cmc f6981be6cb

• Add '.gitbay/wiki/' from commit '5593f9c1d6842ab10c228f7818320e13a00dff95'

  cmc · 2026-09-05 06:20 UTC

  success Verified · cmc 00033f022f