Security Audit · Workflow runs · github/spec-kit · GitHub

Actions

All workflows
Workflows
- Security Audit Security Audit
- Add Community Bundle from Issue Submission Add Community Bundle from Issue Submission
- Add Community Extension from Issue Submission Add Community Extension from Issue Submission
- Add Community Preset from Issue Submission Add Community Preset from Issue Submission
- Assess a Feature Request by Installing and Running Spec Kit Assess a Feature Request by Installing and Running Spec Kit
- Assess Bug from Labeled Issue Assess Bug from Labeled Issue
- Catalog: Notify submission Catalog: Notify submission
- Close stale issues and PRs Close stale issues and PRs
- CodeQL CodeQL
- CodeQL CodeQL
- CodeQL - Code Quality CodeQL - Code Quality
Management
- Caches
- Deployments

Security Audit

Actions

Loading...
Loading

2,327 workflow runs

2,327 workflow runs

[extension] Add SDD Lifecycle Manager extension to community catalog Security Audit #766: Pull request #3945 opened by github-actions Bot

22s add-lifecycle-extension-032ac635306aef1b

add-lifecycle-extension-032ac635306aef1b

22s

fix: narrow bare except Exception in invoke separator resolution Security Audit #765: Pull request #3856 synchronize by Quratulain-bilal

19s Quratulain-bilal:fix/agents-narrow-exception

Quratulain-bilal:fix/agents-narrow-exception

19s

fix(events): skip non-UTF-8 extension manifests (#3900) Security Audit #764: Commit 4343cd5 pushed by mnriem

27s main

main

27s

fix(manifests): reject non-string metadata instead of crashing on it Security Audit #763: Pull request #3943 synchronize by Noor-ul-ain001

29s Noor-ul-ain001:fix/manifest-nonstring-metadata-crash

Noor-ul-ain001:fix/manifest-nonstring-metadata-crash

29s

Security Audit Security Audit #761: Scheduled

30s main

main

30s

Update README with 'uv' installation instructions Security Audit #760: Pull request #1620 synchronize by JanuszNowak

22s JanuszNowak:main

JanuszNowak:main

22s

Allow overriding default init integration via SPECKIT_DEFAULT_INIT_IN… Security Audit #759: Pull request #3940 opened by dradetsky

27s dradetsky:feat/3939-set-default-integration

dradetsky:feat/3939-set-default-integration

27s

fix(archives): wrap the bare EOFError a truncated tar.gz raises Security Audit #758: Pull request #3938 opened by Noor-ul-ain001

32s Noor-ul-ain001:fix/tar-truncation-eoferror

Noor-ul-ain001:fix/tar-truncation-eoferror

32s

feat(extensions): scaffold config templates on extension add/enable Security Audit #757: Pull request #2000 synchronize by mvanhorn

21s mvanhorn:osc/fix-extension-scaffolding-lifecycle

mvanhorn:osc/fix-extension-scaffolding-lifecycle

21s

feat(events): context injection for opencode and JSON-envelope agent hooks Security Audit #753: Pull request #3934 opened by kanfil

22s tikalk:feat/events-context-injection

tikalk:feat/events-context-injection

22s

fix(presets): restore core skills instead of deleting them on preset remove Security Audit #750: Pull request #3929 opened by chelsealong

16s chelsealong:fix/3928-preset-remove-deletes-core-skills

chelsealong:fix/3928-preset-remove-deletes-core-skills

16s

fix(bundler): read the authoritative default_integration field, not only its legacy aliases Security Audit #749: Pull request #3880 synchronize by jawwad-ali

27s jawwad-ali:fix/bundler-default-integration-field

jawwad-ali:fix/bundler-default-integration-field

27s

fix(workflows): report a falsy non-mapping overlay manifest as a shape error Security Audit #748: Pull request #3884 synchronize by jawwad-ali

24s jawwad-ali:fix/overlay-falsy-nonmapping-manifest

jawwad-ali:fix/overlay-falsy-nonmapping-manifest

24s

fix(workflows): fail a gate whose on_reject is not abort/skip/retry (… Security Audit #747: Commit d1e86f6 pushed by mnriem

23s main

main

23s

fix(bundler): resolve built-in step types when checking bundle component references Security Audit #746: Pull request #3885 synchronize by jawwad-ali

22s jawwad-ali:fix/bundler-builtin-step-references

jawwad-ali:fix/bundler-builtin-step-references

22s

fix(presets): validate required manifest mappings (#3898) Security Audit #745: Commit 400ad01 pushed by mnriem

23s main

main

23s

fix: eliminate TOCTOU race in zip packaging (#3855) Security Audit #744: Commit 642fa56 pushed by mnriem

19s main

main

19s

fix(workflows): fail a fan-in step whose output is not a mapping (#3887) Security Audit #743: Commit 521020b pushed by mnriem

21s main

main

21s

fix(workflows): refetch non-UTF-8 catalog caches (#3901) Security Audit #742: Commit 14e8235 pushed by mnriem

21s main

main

21s

fix(bundler): wrap local catalog decode failures (#3902) Security Audit #741: Commit 1831fff pushed by mnriem

16s main

main

16s

fix: eliminate TOCTOU race in zip packaging Security Audit #740: Pull request #3855 synchronize by Quratulain-bilal

25s Quratulain-bilal:fix/packager-toctou

Quratulain-bilal:fix/packager-toctou

25s

Add --extension flag to specify init for opting into extensions a… Security Audit #739: Commit ba7ae79 pushed by mnriem

27s main

main

27s

fix: log rollback errors instead of silently swallowing them Security Audit #738: Pull request #3926 opened by Quratulain-bilal

20s Quratulain-bilal:fix/rollback-log-errors

Quratulain-bilal:fix/rollback-log-errors

20s

fix: catch OSError in streaming dispatch_command() Security Audit #737: Pull request #3925 opened by Quratulain-bilal

19s Quratulain-bilal:fix/streaming-oserror-handler

Quratulain-bilal:fix/streaming-oserror-handler

19s

fix: make save_init_options() write atomically Security Audit #736: Pull request #3924 opened by Quratulain-bilal

1m 15s Quratulain-bilal:fix/init-options-atomic-write

Quratulain-bilal:fix/init-options-atomic-write

1m 15s

ProTip! You can narrow down the results and go further in time using created:<2026-07-31 or the other filters available.