Harden and test ruleset synchronization - #3

Merged

vitormattos merged 24 commits into

mainfrom

hardening/ruleset-sync-quality

Sep 15, 2026

Commits on Sep 15, 2026

refactor: harden ruleset synchronization
vitormattos
committed
aaa7cd4
fix: compare effective ruleset configuration
vitormattos
committed
aef5967
fix: fail closed on repository API errors
vitormattos
committed
097994a
test: cover ruleset synchronization behavior
vitormattos
committed
12d17ce
test: assert ruleset policy invariants
vitormattos
committed
9bd7972
fix: propagate synchronization failures explicitly
vitormattos
committed
2e39dd3
fix: preserve command failure status
vitormattos
committed
69e2ce1
ci: add tests and security checks
vitormattos
committed
e32c4bd
ci: serialize privileged ruleset syncs
vitormattos
committed
15375df
ci: enable Dependabot for GitHub Actions
vitormattos
committed
d21b3fa
docs: document ruleset automation
vitormattos
committed
e3877bc
security: scope ruleset tokens per repository
vitormattos
committed
9ad4218
security: add Dependabot update cooldown
vitormattos
committed
abb801a
security: pin workflow analysis tool versions
vitormattos
committed
3241a21
ci: split quality checks by concern
vitormattos
committed
8763497
ci: add dedicated test workflow
vitormattos
committed
00f1e68
ci: add dedicated shellcheck workflow
vitormattos
committed
88bef9a
ci: add dedicated actionlint workflow
vitormattos
committed
61d29b1
ci: add dedicated zizmor workflow
vitormattos
committed
53500d5
docs: move ruleset sync details out of README
vitormattos
committed
bda38d8
docs: document testing and validation
vitormattos
committed
56009d9
docs: keep README focused on repository purpose
vitormattos
committed
ebaf413
ci: name Bats ruleset sync workflow explicitly
vitormattos
committed
af00b69
ci: replace generic test workflow name
vitormattos
committed
744d894

Navigation Menu

Uh oh!

Harden and test ruleset synchronization - #3

Harden and test ruleset synchronization#3
vitormattos merged 24 commits into
mainfrom
hardening/ruleset-sync-quality

Commits on Sep 15, 2026

refactor: harden ruleset synchronization

fix: compare effective ruleset configuration

fix: fail closed on repository API errors

test: cover ruleset synchronization behavior

test: assert ruleset policy invariants

fix: propagate synchronization failures explicitly

fix: preserve command failure status

ci: add tests and security checks

ci: serialize privileged ruleset syncs

ci: enable Dependabot for GitHub Actions

docs: document ruleset automation

security: scope ruleset tokens per repository

security: add Dependabot update cooldown

security: pin workflow analysis tool versions

ci: split quality checks by concern

ci: add dedicated test workflow

ci: add dedicated shellcheck workflow

ci: add dedicated actionlint workflow

ci: add dedicated zizmor workflow

docs: move ruleset sync details out of README

docs: document testing and validation

docs: keep README focused on repository purpose

ci: name Bats ruleset sync workflow explicitly

ci: replace generic test workflow name