This repository has been archived on 2026-08-04. You can view files and clone it, but cannot push or open issues or pull requests.
orchestrator/.github/workflows
Adam Moussa 0a5a78ecf3
fix(agent-team): post-build denied-path check writes scratch outside the checkout (#38)
Live smoke exposed a self-pollution bug (pre-existing from PR #17): the post-build
denied-path check wrote its own _build_diff_z.bin / _build_status_z.bin into the
working tree, then its own `git status --untracked-files=all` flagged them as
out-of-scope writes — failing any run with a narrow declared_scope (the smoke's
docs/**). Write them to $RUNNER_TEMP instead (read via $_DIFF_Z/$_STATUS_Z), so
the check no longer sees its own temp files. The agent-team pytest artifacts were
already correctly gitignored; only the check's own files tripped it. Test harness
updated to pass the env paths. 1044 tests, ruff clean.
2026-06-22 19:20:05 -04:00
..
agent-team-apply-verify.yml fix(agent-team): post-build denied-path check writes scratch outside the checkout (#38) 2026-06-22 19:20:05 -04:00
ci.yaml ci: add workflow permissions from GHAS notes 2026-06-17 17:56:32 -04:00
dependency-review.yml ci: add workflow permissions from GHAS notes 2026-06-17 17:56:32 -04:00
labeler.yml Adopt org CI conventions: thin wrappers over reusable workflows + dependabot 2026-06-17 17:28:55 -04:00