fix: pin scorecard action to valid upstream commit - #3781

Open

KooshaPari wants to merge 254 commits into

tailcallhq:mainfrom

KooshaPari:preserve/workflow-schema-wave-20260729

This pull request is big! We're only showing the most recent 250 commits

Commits on May 2, 2026

chore: update stale workflow

Phenotype Agent
and
claude
committed
ci: add trufflehog secrets scan
Phenotype Agent
committed
docs: add CODEOWNERS
Phenotype Agent
committed
ci: add FUNDING.yml
KooshaPari
committed
docs: add CONTRIBUTING.md and SECURITY.md
Phenotype Agent
committed
Add CHANGELOG.md scaffolding

Phenotype Agent
and
claude
committed
docs: trim README to 169 lines, add fork preamble

Phenotype Agent
and
claude
committed
docs: trim README to 169 lines, add fork preamble (#5)

authored
ci(cargo-deny): add workflow_dispatch trigger, fix double-tag checkout

KooshaPari
and
claude
committed

Commits on May 3, 2026

chore: bump version to 0.1.1 (#6)

KooshaPari
and
Phenotype Agent
authored
chore: commit untracked infrastructure files
Phenotype Agent
committed
ci: pin all GitHub Actions SHA [org-bootstrap-2026-05-03]
Phenotype Agent
committed

Commits on May 4, 2026

fix(cargo-deny): remove stale RUSTSEC-2026-0049 ignore (#7)

KooshaPari
and
claude
authored
fix(cargo-deny): ignore unmaintained transitive advisories with rationale
Phenotype Agent
committed
fix(cargo-deny): ignore unmaintained transitive advisories with rationale (#8)

KooshaPari
and
Phenotype Agent
authored
fix(forgecode): update compact history handling
Phenotype Agent
committed

Commits on May 5, 2026

fix(forge_main): suppress cursor position timeout errors on exit
Phenotype Agent
committed
feat(forgecode): add LLM summarization for compaction

Phenotype Agent
and
claude
committed

Commits on May 6, 2026

security(ci): replace trufflehog/actions/setup with go install + setup-go

Phenotype Agent
and
claude
committed
fix(forgecode): restore workspace members list

Phenotype Agent
and
claude
committed
chore: add cargo-deny bans config and update workflows
Phenotype Agent
committed
fix(forgecode): restore workspace members

Phenotype Agent
and
claude
committed
fix(workflows): use pull_request instead of pull_request_target

Phenotype Agent
and
claude
committed
chore: add omniroute benchmark plan

Phenotype Agent
and
claude
committed

Commits on May 7, 2026

chore(forgecode): add packageManager field

Phenotype Agent
and
claude
committed
fix(rust): tighten deny.toml wildcards policy in forgecode
Phenotype Agent
committed

Commits on May 28, 2026

Merge upstream/main into main

Phenotype Agent
and
claude
committed
Merge fork commit 6100def72 into synced main
Phenotype Agent
committed

Commits on Jun 8, 2026

chore(forgecode): shell-script hygiene (#14)

authored

Commits on Jun 9, 2026

chore(forgecode): align editorconfig with org standard (#16)

KooshaPari
and
Phenotype Agent
authored
ci: add release workflow with tag triggers, build, test, and crates.io publish
Phenotype Agent
committed
chore(forgecode): align version drift (#17)

KooshaPari
and
Phenotype Agent
authored
chore(forgecode): add standard CODEOWNERS (#15)

KooshaPari
and
Phenotype Agent
authored

Commits on Jun 12, 2026

chore(gitignore): adopt shared node template from phenotype-tooling (#19)
KooshaPari
authored

Commits on Jun 16, 2026

feat(session-viewer): hide subagent sessions, add FTS5 search, pagination, and loop commands (#20)

authored

Commits on Jun 18, 2026

wip: pre-push snapshot 2026-06-18T02:00:13Z from wrap-up session
Phenotype Agent
committed

Commits on Jun 21, 2026

feat(forgecode): perf-v2 — dirty tracking, drop guard, FTS5 search, by-ref upsert, HTTP cache, composite indexes (#21)

KooshaPari
and
Phenotype Agent
authored
feat(forgecode): v3 — :reparent/:cwd commands, sort UI, cwd+message_count migration (#22)

KooshaPari
and
Phenotype Agent
authored
feat(forgecode): v4 — :reparent/:cwd commands, sort UI, ConversationSort canonical, get_conversation_snippet (#24)

KooshaPari
and
Phenotype Agent
authored
fix(forge_app,forge_repo): add new Conversation fields to test fixtures
Phenotype Agent
committed
chore(ci): regenerate workflows via gh-workflow-gen
Phenotype Agent
committed
feat(config): document OutputMode in schema + chore(docs): L7 stub regeneration
Phenotype Agent
committed
fix(forgecode): v4-ux P0 reactivity — kill stale background tasks, Arc-shared conv map, single-await prompt (#25)

KooshaPari
and
Phenotype Agent
authored
fix(forgecode): v4-ux P0 reactivity — kill stale background tasks, Arc-shared conv map, single-await prompt (#26)

KooshaPari
and
Phenotype Agent
authored

Commits on Jun 22, 2026

feat(forgecode): status bar — Claude-style context/tokens/tools/last-action (#27)

KooshaPari
and
Phenotype Agent
authored

Commits on Jun 23, 2026

fix(forge): non-TTY stdin no longer hangs; re-point auto-update to KooshaPari/forgecode (#28)

KooshaPari
and
Phenotype Agent
authored

Commits on Jun 24, 2026

feat(forgecode): compress tool output to 3 lines with expand hint (#29)

KooshaPari
and
Phenotype Agent
authored
feat(forgecode): ASCII color coding + symbol per tool type (#30)

KooshaPari
and
Phenotype Agent
authored
feat(forgecode): promote subagent tool discovery to top-level system prompt (#31)

KooshaPari
and
Phenotype Agent
authored

Commits on Jun 26, 2026

Commits on Jun 27, 2026

Commits on Jun 28, 2026

Commits on Jun 29, 2026

Commits on Jun 30, 2026

fix(security): default-deny policy engine + opt-in redacted telemetry (#68)

KooshaPari
and
Phenotype Agent
authored
perf(forge_repo): lite conversation-list query — fixes 3GB+ RAM (#71)

authored
docs(packaging): forge-dev installer + CLI spec (#72)

KooshaPari
and
Phenotype Agent
authored
perf(update): skip GitHub update check in CI/agent-mode; default frequency to Daily (#74)

KooshaPari
and
Phenotype Agent
authored
perf(alloc): linux-gate jemalloc; use mimalloc on macOS (ARM64 bug #2532) (#75)

KooshaPari
and
Phenotype Agent
authored
feat(maintenance): add 'forge maintenance compress' for zstd backfill migration (#76)

KooshaPari
and
Phenotype Agent
authored
feat(daemon): Zig forge-daemon (kqueue+posix_spawn+task-ring) for density (#77)

KooshaPari
and
Phenotype Agent
authored
feat(repo-map): tree-sitter repository structure map (#73)

KooshaPari
and
Phenotype Agent
authored

Commits on Jul 2, 2026

chore: upstream diff analysis report (#70)

KooshaPari
and
Phenotype Agent
authored
chore(perf): baseline measurement (per-agent RSS / idle CPU / system-pool) (#78)

KooshaPari
and
Phenotype Agent
authored
chore: cross-fleet hygiene sweep (#69)

KooshaPari
and
Phenotype Agent
authored

Commits on Jul 3, 2026

feat(repo-map): tree-sitter repo map + forge3d CLI + similarity hash-only impl (#79)

KooshaPari
and
Phenotype Agent
authored
feat(forge-tui): wire forge_tui TUI dashboard crate into workspace (#80)

KooshaPari
and
Phenotype Agent
authored
feat(packaging): forge-dev binary + install guide (T18) (#81)

authored
chore(forge3d): polish CLI help text — add about/doc strings to all commands (T57) (#82)

KooshaPari
and
KooshaPari
authored
chore(sync): integrate upstream tailcallhq/forgecode (32 commits) (#83)

authored
feat(publish): add cargo-dist-style release pipeline for forge-dev (#84)

KooshaPari
and
Phenotype Agent
authored

Commits on Jul 6, 2026

feat(brand): add Terminal-Forge golden icon set (vision-pillar L96) (#87)

KooshaPari
and
Phenotype Agent
authored
docs(readme): inject centered brand icon + tagline (L104) (#88)

KooshaPari
and
Phenotype Agent
authored
feat(brand): L101 motion polish — animated SVG variant (#89)

KooshaPari
and
Phenotype Agent
authored

Commits on Jul 7, 2026

docs(identity): L105 animated demo media (SVG + MP4 + README) (#90)

KooshaPari
and
Phenotype Agent
authored
feat(forge_display): Terminal-Forge palette → theme.rs (Phenotype-org addition) (#86)

KooshaPari
and
Phenotype Agent
authored
docs(readme): L107 — link to visual identity demo (L105 ladder close) (#91)

KooshaPari
and
Phenotype Agent
authored
audit(v38): forgecode C03 scorecard — Agent Readiness (18/36, D) (#85)

authored
renames(helioslite): publish-surface rename + provenance docs + release policy (#92)
KooshaPari
authored
feat(forge_infra): L133 cross-pollination — backoff + cyclic_check + glob_pattern (#93)

KooshaPari
and
Phenotype Agent
authored

Commits on Jul 15, 2026

fix: per-provider error resilience and /providers remove TUI command
Phenotype Agent
committed

Commits on Jul 22, 2026

ci: fix release workflow heredoc indentation
KooshaPari
committed
feat(gpu): add forge_gpu GpuLane for heterogeneous CUDA routing (#95)
KooshaPari
authored
ci: harden workflows and unblock checks

KooshaPari
and
forge-code-agent
committed
ci: fix rust-cache action pin

KooshaPari
and
forge-code-agent
committed
ci: use pinned trufflehog action

KooshaPari
and
forge-code-agent
committed
ci: repair pinned action shas

KooshaPari
and
forge-code-agent
committed
ci: fix trufflehog image tag

KooshaPari
and
forge-code-agent
committed
ci: restore deny and nextest commands

KooshaPari
and
forge-code-agent
committed
ci: install zig for workspace builds

KooshaPari
and
forge-code-agent
committed
chore: preserve local forgecode work
KooshaPari
committed
ci: gate forge daemon zig core
KooshaPari
committed
fix: preserve update fallback result handling
KooshaPari
committed
fix: repair perf harness linux build
KooshaPari
committed
perf: fast-path zsh rprompt
KooshaPari
committed
fix: parse theme hex without string slicing
KooshaPari
committed
fix: satisfy strict string safety lints
KooshaPari
committed
chore: preserve forgecode workflow and generated state

KooshaPari
and
forge-code-agent
committed
fix: satisfy ci clippy in perf harness
KooshaPari
committed
chore: preserve forgecode workspace fixes

KooshaPari
and
forge-code-agent
committed
ci: make autofix workflow verify only
KooshaPari
committed
ci: format fork gpu lane crate
KooshaPari
committed
Merge remote-tracking branch 'fork/main' into fix/workflow-indent
KooshaPari
committed
chore: preserve forge info formatting
KooshaPari
committed
ci: align autofix and schema gates
KooshaPari
committed
test: canonicalize generated schema
KooshaPari
committed

Commits on Jul 23, 2026

Merge pull request #96 from KooshaPari/fix/workflow-indent
KooshaPari
authored
fix: gate forge3d unix sockets on windows
KooshaPari
committed
fix: gate forge3d daemon on unix
KooshaPari
committed
fix: preserve forge3d cli metadata on windows
KooshaPari
committed
feat(dual-harness): shared-3task.v1 process_smoke adapter

KooshaPari
and
cursoragent
committed
chore: update Cargo.lock for dual_harness workspace member

KooshaPari
and
cursoragent
committed
Merge pull request #98 from KooshaPari/feat/dual-harness-shared-3task
KooshaPari
authored
fix: clear forge3d windows release warnings
KooshaPari
committed
Merge remote-tracking branch 'fork/main' into fix/windows-release-forge3d
KooshaPari
committed
fix: align dual harness with ci lint
KooshaPari
committed
fix: vendor dual harness fixture for ci
KooshaPari
committed
Merge pull request #97 from KooshaPari/fix/windows-release-forge3d
KooshaPari
authored
fix: gate forge daemon unix sockets on windows (#99)

KooshaPari
and
KooshaPari
authored
fix: repair winterminal windows release compile (#100)

KooshaPari
and
KooshaPari
authored
fix: report helioslite package version
KooshaPari
committed
Merge pull request #101 from KooshaPari/fix/helioslite-version-branding-v2
KooshaPari
authored
fix: keep forge main cli tests compiling
KooshaPari
committed
fix: keep forge main cli tests compiling (#102)
KooshaPari
authored
Merge remote-tracking branch 'fork/main' into fix/per-provider-error-resilience
KooshaPari
committed
fix: satisfy provider resilience clippy
KooshaPari
committed
fix: per-provider error resilience and provider removal (#94)
KooshaPari
authored
chore: trigger main CI after merge train
KooshaPari
committed
docs: record forgecode merge train
KooshaPari
committed
fix: gate forge tui unix sockets on windows
KooshaPari
committed
fix: gate forge dbd unix sockets on windows
KooshaPari
committed
fix: silence forge dbd windows unix-gate warnings
KooshaPari
committed
ci: install protoc for nightly and attestation

KooshaPari
and
forge-code-agent
committed
fix: align installers with fork release artifacts

KooshaPari
and
forge-code-agent
committed
ci: use supported artifact provenance action

KooshaPari
and
forge-code-agent
committed
ci: enable dev binary feature in nightly

KooshaPari
and
forge-code-agent
committed
ci: add scorecard workflow for quality gating
KooshaPari
committed
chore(ci): harden github workflows and add fork scorecard/sast coverage
KooshaPari
committed
ci: fix workflow yaml needs indentation
KooshaPari
committed

Commits on Jul 24, 2026

fix(spinner): suppress ANSI output when stderr is not a terminal
KooshaPari
committed
chore: add bench/ to .gitignore
KooshaPari
committed

Commits on Jul 28, 2026

Commits on Jul 29, 2026

fix: integrate compaction strategies across providers
KooshaPari
committed
ci: make generated lint and release gates runnable
KooshaPari
committed
style: satisfy workspace formatting and clippy
KooshaPari
committed
wip(repo): preserve workspace conversation query
KooshaPari
committed
feat(compaction): add AI-driven compression and semantic pruning
KooshaPari
committed
chore: preserve workspace conversation query support
KooshaPari
committed
fix(ui): adjust stream renderer for compaction integration
KooshaPari
committed
chore(ui): expose workspace conversation scope
KooshaPari
committed
chore(api): thread workspace conversation scope
KooshaPari
committed
fix(repo): preserve typed conversation summary selection
KooshaPari
committed
fix: propagate lightweight conversation workspace scope
KooshaPari
committed
fix: propagate lightweight conversation workspace scope
KooshaPari
committed
fix(env): make workspace hashes deterministic

KooshaPari
and
KooshaPari
authored
Merge branch 'chore/preserve-workspace-conversation-query'
KooshaPari
committed
fix: use deterministic hash builder API
KooshaPari
committed
fix: avoid unchecked compaction indexing
KooshaPari
committed
chore(ci): regenerate release workflow manifests
KooshaPari
committed
ci: refresh generated release workflow
KooshaPari
committed
style: format compaction bounds check
KooshaPari
committed
ci: rerun canonical release gates
KooshaPari
committed
ci: compare generated workflows semantically
KooshaPari
committed
build: lock workflow yaml parser
KooshaPari
committed
chore: refresh forge config schema
KooshaPari
committed
ci: harden scorecard and add fuzz smoke
KooshaPari
committed
ci: repair Mergify workflow syntax
KooshaPari
committed
ci: remove obsolete Mergify rules
KooshaPari
committed
fix: update plist XML parser dependencies
KooshaPari
committed
ci: pin CodeQL and attestation actions
KooshaPari
committed
fix: refresh dependency SBOMs and remove vulnerable DNS stack
KooshaPari
committed
fix: remove unsupported hickory DNS configuration
KooshaPari
committed
fix: scope release drafter write permissions
KooshaPari
committed
fix: upgrade workflow generator dependencies
KooshaPari
committed
fix: replace unmaintained fnv_rs dependency
KooshaPari
committed
fix: refresh configuration schema after DNS removal
KooshaPari
committed
fix: migrate forge dbd protocol to bincode 2
KooshaPari
committed
chore: configure Renovate dependency updates
KooshaPari
committed
fix: remove non-actionable Mergify automation
KooshaPari
committed
fix: replace direct deprecated yaml dependency
KooshaPari
committed
style: format yaml policy test
KooshaPari
committed
fix: remove unused embedding and clipboard image features
KooshaPari
committed
ci: harden Scorecard and add fuzz smoke (#105)

KooshaPari
and
KooshaPari
authored
fix: use modern AWS HTTPS client
KooshaPari
committed
fix: grant release drafter label permission
KooshaPari
committed
fix: skip fork auto-labeling
KooshaPari
committed
fix: pin scorecard action to valid upstream commit
KooshaPari
committed
chore: retrigger ci after scorecard pin update
KooshaPari
committed
ci: update .mergify.yml
KooshaPari
committed
ci: update .github/workflows/ci.yml
KooshaPari
committed
ci: update .github/workflows/trunk-check.yml
KooshaPari
committed
ci: update .github/workflows/scorecard.yml
KooshaPari
committed
ci: update .github/stale.yml
KooshaPari
committed
ci: update .trunk/trunk.yaml
KooshaPari
committed
ci: update renovate.json
KooshaPari
committed
ci: update .pre-commit-config.yaml
KooshaPari
committed
ci: skip release-drafter labels for fork PR branches

KooshaPari
and
forge-code-agent
committed
ci: run release-drafter autolabeler only on push

KooshaPari
and
forge-code-agent
committed
ci: disable release-drafter autolabeler in fork PR checks

KooshaPari
and
forge-code-agent
committed
ci: remove release-drafter autolabeler step

KooshaPari
and
forge-code-agent
committed

Commits on Jul 31, 2026

merge main into pr106 dependency hardening
KooshaPari
committed
ci: refresh generated workflows after merge
KooshaPari
committed
ci: remove fork-incompatible release labeling and repair trunk pin
KooshaPari
committed
ci: disable release drafter autolabeler
KooshaPari
committed
ci: pin trunk action to verified revision
KooshaPari
committed
ci: replace legacy trunk config with rust gates
KooshaPari
committed
ci: refresh generated workflow
KooshaPari
committed
ci: quote workflow output paths
KooshaPari
committed
ci: refresh generated release workflow
KooshaPari
committed
ci: repair generated workflows
KooshaPari
authored
merge promoted CI repairs into pr106
KooshaPari
committed