Commit graph

Select branches

Hide pull requests

dependabot/npm_and_yarn/minor-and-patch-a5337e4f4a

main

#1

#10

#11

#12

#13

#14

#15

#16

#18

#19

#2

#20

#21

#22

#23

#24

#25

#26

#27

#28

#29

#3

#30

#31

#32

#33

#34

#35

#36

#38

#39

#40

#41

#42

#43

#44

#45

#46

#47

#48

#49

#5

#50

#51

#52

#54

#55

#56

#57

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#67

#68

#69

#7

#70

#71

#72

#73

#74

#75

#75

#8

#9

Mono Color

• cb7acd1ad4
  Merge 4d27d26dd8 into 517f41eb7f dependabot[bot] 2026-08-04 15:58:06 +00:00
• 4d27d26dd8
  chore(deps): bump the minor-and-patch group with 3 updates dependabot/npm_and_yarn/minor-and-patch-a5337e4f4a dependabot[bot] 2026-08-04 15:58:02 +00:00
• 517f41eb7f
  ci: add org PR policy caller (#74) main Adam Moussa 2026-08-04 11:56:30 -04:00
• 7c25c8bd19
  ci: add org PR policy caller Adam Moussa 2026-08-04 11:32:45 -04:00
• c09cf1110d
  fix(iam): allow API Gateway authorizer role passing Adam Moussa 2026-08-03 14:38:39 -04:00
• db1cc5300f
  fix(iam): allow API Gateway authorizer role passing Adam Moussa 2026-08-03 14:34:45 -04:00
• 5d0e8480d4
  build(deps): bump Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml (#69) dependabot[bot] 2026-08-02 00:18:43 +00:00
• a247a3df71 build(deps): bump Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml dependabot[bot] 2026-08-01 00:51:05 +00:00
• c73680207a
  build(deps): bump Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml (#70) dependabot[bot] 2026-08-01 20:17:55 -04:00
• 19c17b83ee
  build(deps): bump Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml dependabot[bot] 2026-08-01 00:51:20 +00:00
• 8b5414f879
  build(deps): bump Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml (#71) dependabot[bot] 2026-07-31 20:49:28 -04:00
• dd6ff668b0
  build(deps): bump Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml dependabot[bot] 2026-07-31 23:47:04 +00:00
• 3b54a64e52
  build(deps): bump Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml (#72) dependabot[bot] 2026-07-31 19:44:45 -04:00
• 0c763dd5b3
  build(deps): bump Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml dependabot[bot] 2026-07-31 19:14:00 +00:00
• 9faf0295d5
  Merge pull request #68 from Sea-Haven-Industries/feature/INFRA-186-boundary-prod-dev-scoping Adam Moussa 2026-07-31 13:49:55 -04:00
• 16a82c2a36
  docs(iam): qualify mgmt-only verification claims per cross-review round 2 Adam Moussa 2026-07-31 13:46:29 -04:00
• 08a1d41b05
  docs(iam): resolve confirmed review findings from both INFRA-186 gates Adam Moussa 2026-07-31 13:44:21 -04:00
• a1086e04fb
  docs(readme): describe the boundary floor, not the superseded prefix design Adam Moussa 2026-07-31 13:23:20 -04:00
• e791005af0
  docs(iam): cite INFRA-187 as the per-workload boundary end state Adam Moussa 2026-07-30 19:09:27 -04:00
• 32f06e74eb
  refactor(iam): reduce boundary to the fleet-wide floor, defer per-workload scope Adam Moussa 2026-07-30 19:07:09 -04:00
• 59852eff34
  fix(iam): restore four permissions the boundary would have denied at migration Adam Moussa 2026-07-30 18:17:16 -04:00
• b264f74f01
  fix(iam): correct two boundary-scoping defects found in review Adam Moussa 2026-07-30 18:03:40 -04:00
• 274f933495
  refactor(iam): scope Lambda execution boundary to per-workload prefixes Adam Moussa 2026-07-30 17:46:37 -04:00
• 0e6e8ae50e
  Merge pull request #67 from Sea-Haven-Industries/feature/terraform-substrate Adam Moussa 2026-07-30 17:03:24 -04:00
• 981960433f
  fix(iam): scope Terraform guardrail role writes to a Terraform-owned path Adam Moussa 2026-07-30 16:55:45 -04:00
• ea27635ef2
  feat(iac): add per-account HCP Terraform deploy substrate for prod and dev Adam Moussa 2026-07-30 16:31:34 -04:00
• 47a6ca2939
  Merge pull request #66 from Sea-Haven-Industries/chore/add-codeowners Adam Moussa 2026-07-29 13:01:59 -04:00
• f1f66dd2f1
  chore: add CODEOWNERS Adam Moussa 2026-07-29 12:59:09 -04:00
• 58a8ec608c
  Merge pull request #65 from Sea-Haven-Industries/ci/pin-reusables-v1.0.2 Adam Moussa 2026-07-28 18:16:14 -04:00
• e715f8b6f0 style(ci): normalize workflow block spacing Adam Moussa 2026-07-28 18:07:11 -04:00
• 935b5ffb5a ci(deps): pin org reusable workflows to v1.0.2 Adam Moussa 2026-07-28 17:57:16 -04:00
• 5c719710b7
  Merge pull request #64 from Sea-Haven-Industries/docs/substrate-escalation-controls Adam Moussa 2026-07-27 20:13:25 -04:00
• 83d0d0eb0d
  docs(readme): document the deploy substrate's escalation controls Adam Moussa 2026-07-27 19:15:08 -04:00
• 9c1d083f3f
  Merge pull request #63 from Sea-Haven-Industries/fix/deploy-substrate-deny-self-mutation Adam Moussa 2026-07-27 19:09:08 -04:00
• 61a94da4fc
  fix(iam): reconcile the remaining substrate divergences from the mgmt copy Adam Moussa 2026-07-27 18:55:10 -04:00
• 62f6a76e6c
  fix(iam): port DenySelfMutation self-protection into the prod/dev deploy substrate Adam Moussa 2026-07-27 18:37:39 -04:00
• ea2224e326
  Merge pull request #62 from Sea-Haven-Industries/fix/cfn-exec-role-policy-size Adam Moussa 2026-07-27 16:45:29 -04:00
• 2cfc122269
  fix(deploy-substrate): move boundary-gated IAM policy off the role's inline budget Adam Moussa 2026-07-27 16:43:15 -04:00
• e898cb6342
  Merge pull request #61 from Sea-Haven-Industries/feat/deploy-substrate-stacks Adam Moussa 2026-07-27 16:35:00 -04:00
• d6bea33436
  feat(deploy-substrate): per-account GitHub Actions deploy substrate for prod/dev Adam Moussa 2026-07-27 16:24:09 -04:00
• dd552bff4d
  build(deps): bump the minor-and-patch group with 3 updates (#60) dependabot[bot] 2026-07-24 18:50:31 -04:00
• 6b88059b19
  build(deps): bump the minor-and-patch group with 3 updates dependabot[bot] 2026-07-24 19:14:39 +00:00
• 7cce026f4a
  chore: drop deleted tables from Phase2 backup selection (#59) Adam Moussa 2026-07-23 16:21:04 -04:00
• 516ae2d625
  chore: drop deleted tables from Phase2 backup selection Adam Moussa 2026-07-23 16:19:03 -04:00
• 5d7ca83097
  fix(scp): exempt chatbot:* from workloads-region-lock (global service, us-east-2 control plane) (#58) Adam Moussa 2026-07-23 15:47:11 -04:00
• ab3bdc211c
  fix(scp): exempt chatbot:* from workloads-region-lock (global service, us-east-2 control plane) Adam Moussa 2026-07-23 15:45:02 -04:00
• 4d3c846b88
  feat(prod): seahaven-prod DynamoDB CMK + site-alerts alarm topic (procurement-ingest migration Phase 0a) (#57) Adam Moussa 2026-07-23 15:29:55 -04:00
• a754f22472
  Merge remote-tracking branch 'origin/main' into feat/prod-cmk-and-alarm-topic Adam Moussa 2026-07-23 15:27:18 -04:00
• 313df882ba
  refactor(prod): drop cross-account CMK grant (slack-bot decommissioned 2026-07-23) Adam Moussa 2026-07-23 15:10:12 -04:00
• c1347fcdb5
  fix(scripts): account-id assertion in cfn-stack-decommission; complete the aws-cdk-lib 2.262.0 bump (patched brace-expansion); document CMK cutover trap Adam Moussa 2026-07-23 14:46:17 -04:00
• 5dab14ce68
  feat(prod): add seahaven-prod DynamoDB CMK and site-alerts alarm-topic stacks Adam Moussa 2026-07-23 14:28:10 -04:00
• cc54b1e28b
  chore(security): add explicit workflow permissions and bump aws-cdk-lib to 2.262.0 (#56) Adam Moussa 2026-07-23 13:38:17 -04:00
• e68df14ace
  chore(deps): bump aws-cdk-lib to 2.262.0 for patched brace-expansion Adam Moussa 2026-07-23 13:20:06 -04:00
• bfdec9b18f
  ci: add least-privilege permissions blocks to workflow callers Adam Moussa 2026-07-23 13:19:21 -04:00
• 9c1568b862
  docs: update aws profile specified in script (local renaming) Adam Moussa 2026-07-23 13:14:36 -04:00
• 6041abbd23
  build(deps): bump the minor-and-patch group with 3 updates (#55) dependabot[bot] 2026-07-17 18:42:15 -04:00
• 09fb1e0eb3
  build(deps): bump the minor-and-patch group with 3 updates dependabot[bot] 2026-07-17 19:14:26 +00:00
• 88fa5777d1
  fix(scp): carve out Bedrock InvokeModel/Converse to us-east-2 for cross-region inference (#54) seahaven-openswe[bot] 2026-07-15 18:52:05 -04:00
• be69040081 fix: add ACCEPTED RISK disposition, hoist Bedrock actions to shared const, mark security-asymmetry amoussa1229 2026-07-15 22:34:05 +00:00
• 274b25d9e8 fix(scp): carve out Bedrock InvokeModel/Converse to us-east-2 for cross-region inference amoussa1229 2026-07-15 22:11:59 +00:00
• ed26ff937d
  Document centralized root access: README runbook + stack comment updates (#52) Adam Moussa 2026-07-14 18:32:40 -04:00
• 3e7e8f0a80
  Document centralized root access: README runbook + stack comment updates Adam Moussa 2026-07-14 18:27:29 -04:00
• 75888e045e
  Extend deny-root-user SCP to the external-dev OU (#51) Adam Moussa 2026-07-14 18:24:42 -04:00
• 6afc803865
  Extend deny-root-user SCP to the external-dev OU Adam Moussa 2026-07-14 18:19:27 -04:00
• 2303a54ebc
  seahaven-prod account baseline (Phase 5) (#50) Adam Moussa 2026-07-14 17:17:55 -04:00
• deb82c01e4
  Apply Phase-5 review findings Adam Moussa 2026-07-14 17:13:58 -04:00
• db71b0a75e
  Add seahaven-prod member baseline (Phase 5) Adam Moussa 2026-07-14 17:00:09 -04:00
• 0a7c1bc450
  seahaven-dev account baseline with org-managed detection (Phase 4) (#49) Adam Moussa 2026-07-14 16:41:36 -04:00
• a678790eb9
  Fix Phase-4 review findings: standards + analyzer stay CFN-owned Adam Moussa 2026-07-14 16:32:30 -04:00
• 0ec8a5ca3c
  Add seahaven-dev member baseline with org-managed detection Adam Moussa 2026-07-14 16:12:24 -04:00
• 2d3ba94140
  Flip delegation runbook to applied with verification evidence (#48) Adam Moussa 2026-07-14 15:53:42 -04:00
• 8c926ce531
  Flip delegation runbook to applied with verification evidence Adam Moussa 2026-07-14 15:51:12 -04:00
• 18f0f40e74
  seahaven-security account baseline + security-OU guardrails (Phase 3) (#47) Adam Moussa 2026-07-14 15:32:50 -04:00
• 3817b7acf5
  Apply Phase-3 security-review findings Adam Moussa 2026-07-14 15:27:37 -04:00
• 11f6e30a42
  Document delegated security administration runbook Adam Moussa 2026-07-14 15:10:41 -04:00
• 69dd0d87b5
  Add seahaven-security member baseline (Phase 3) Adam Moussa 2026-07-14 15:09:19 -04:00
• 57fd67324e
  Route AWS notifications to dedicated mailboxes (#46) Adam Moussa 2026-07-14 14:41:42 -04:00
• 2e68071400
  Route AWS notifications to dedicated mailboxes Adam Moussa 2026-07-14 14:34:04 -04:00
• 10e66c92c0
  Adopt external-dev OU and its 3 SCPs via resource import (#45) Adam Moussa 2026-07-14 14:10:10 -04:00
• d6253b9f83
  Adopt external-dev OU and its 3 SCPs via resource import Adam Moussa 2026-07-14 14:07:03 -04:00
• 22b04c4e75
  Org governance: OU skeleton + generalized SCPs (Phase 2) (#44) Adam Moussa 2026-07-14 14:02:30 -04:00
• cc1355f75d
  Add org-governance to the management deploy job Adam Moussa 2026-07-14 14:00:31 -04:00
• 168cef2649
  Record SCP cross-review dispositions in org-governance Adam Moussa 2026-07-14 13:43:06 -04:00
• 97f27bd8d7
  Add org-governance stack: OU skeleton + generalized SCPs Adam Moussa 2026-07-14 13:32:32 -04:00
• 3ab3bc773a
  Merge external-dev member baseline; rename to seahaven-org-baseline (#43) Adam Moussa 2026-07-14 13:53:07 -04:00
• a9fcc89362
  Split CD into per-account deploy jobs Adam Moussa 2026-07-14 13:51:15 -04:00
• add2eed127
  Commit extdev flow-log VPC ids in code, not -c context Adam Moussa 2026-07-14 13:44:33 -04:00
• e2bbf5ec75
  Rename package to seahaven-org-baseline Adam Moussa 2026-07-14 13:27:38 -04:00
• 8f23c23a66
  Absorb external-dev member baseline stack Adam Moussa 2026-07-14 13:27:38 -04:00
• 1041a157da
  Parameterize baseline constructs for multi-account reuse Adam Moussa 2026-07-14 13:27:38 -04:00
• f3c37d5b20
  build(deps-dev): bump the minor-and-patch group with 2 updates (#40) dependabot[bot] 2026-07-10 20:23:49 +00:00
• 8dde1000ef
  Merge branch 'main' into dependabot/npm_and_yarn/minor-and-patch-417471e184 Adam Moussa 2026-07-10 16:23:15 -04:00
• fd6fa5518b
  Complete stack table in README (#42) Adam Moussa 2026-07-10 16:22:58 -04:00
• cef9ace0aa
  Complete stack table in README Adam Moussa 2026-07-10 16:21:16 -04:00
• 3ee66ef63b
  Document CDK app structure and cdk.json in README (#41) Adam Moussa 2026-07-10 16:07:20 -04:00
• 35c05dc0c9
  Document CDK app structure and cdk.json in README Adam Moussa 2026-07-10 15:56:49 -04:00
• 019c664dc3
  build(deps-dev): bump the minor-and-patch group with 2 updates dependabot[bot] 2026-07-10 19:14:47 +00:00
• 46394f7c75
  build(deps): migrate CDK app ts-node->tsx, adopt typescript 7 (INFRA-183) (#39) Adam Moussa 2026-07-08 17:48:30 -04:00
• 1c6b2ee057
  build(deps): migrate CDK app ts-node->tsx, adopt typescript 7 (INFRA-183) Adam Moussa 2026-07-08 17:20:01 -04:00
• 142e221c47
  feat: harden CIS 4.1 detection depth with M-of-N alarm tuning and CloudTrail Insights (#38) seahaven-openswe[bot] 2026-07-07 15:47:41 -04:00