Commit Graph

8 Commits

Author SHA1 Message Date
Michael Daniels
7045e3afe1 ci/github-script: check types by default 2026-08-10 20:26:01 -04:00
Michael Daniels
03bf53cdb5 Revert "ci/github-script/get-pr-commit-details: output file list for merge commits" 2026-08-05 17:33:01 -04:00
Ben Siraphob
39940b557c ci: fix typos
Assisted-by: Claude Code (claude-opus-5)
2026-08-02 11:15:26 -07:00
Michael Daniels
e7804286db ci/github-script/get-pr-commit-details: output file list for merge commits
Fixes a bug that was originally found by Claude and reported to the NixOS
security team by Anthropic as a security issue.

Previously, the file list was never output for merge commits.

This could have allowed someone who buried an edit to a file that shouldn't be
edited manually in a merge commit to not trigger the check.

It isn't a security issue, though, because the manual-file-edits check is not
a security boundary (just a friendly reminder to committers).

Anthropic report ID: ANT-2026-223Q3FSE
2026-08-01 20:28:39 -04:00
Michael Daniels
4d776b4670 ci/github-script/lint-commits: confirm Git names/emails are present
Prevents issues reported on Matrix by Jujutsu users,
caused by people omitting these fields.
2026-05-05 17:39:22 -04:00
Michael Daniels
58f002f950 ci/github-script/lint-commits: error when conventional commit format is used
E.g. https://redirect.github.com/NixOS/nixpkgs/pull/495442
2026-03-12 18:04:33 -04:00
Michael Daniels
d03b81d689 ci/github-script: don't use GH API when getting commit info, return only subject 2026-03-12 18:04:32 -04:00
Michael Daniels
743ab29528 ci/github-script: split getting commit details for PR into its own file 2026-03-12 18:04:32 -04:00