Skip to content

Actions: github/spec-kit

Actions

Security Audit

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
security.yml
2,068 workflow runs
2,068 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix: add missing utf-8 encoding to registry file open calls Security Audit #494: Pull request #3810 opened by Quratulain-bilal
25s Quratulain-bilal:fix/registry-utf8-encoding
Quratulain-bilal:fix/registry-utf8-encoding
25s
[preset] Update Intake Sequencing Governance preset to v0.2.2 Security Audit #492: Pull request #3809 opened by github-actions Bot
27s update-intake-sequencing-governance-preset-c86ac3e0f727589a
update-intake-sequencing-governance-preset-c86ac3e0f727589a
27s
test(workflows): name the condition-rejection tests for the real boundary Security Audit #491: Pull request #3808 opened by jawwad-ali
18s jawwad-ali:test/condition-rejection-test-names
jawwad-ali:test/condition-rejection-test-names
18s
feat: first-class agent-native runtime hooks for integrations Security Audit #490: Pull request #3704 synchronize by kanfil
25s tikalk:feat/agent-runtime-hooks
tikalk:feat/agent-runtime-hooks
25s
fix(workflows): reject non-string/non-boolean 'condition' in if/while… Security Audit #489: Commit a9c9905 pushed by mnriem
20s main
main
20s
fix(bundle): escape catalog metadata in discovery output (#3774) Security Audit #488: Commit 054fb77 pushed by mnriem
18s main
main
18s
fix(workflows,extensions): tolerate non-list catalog tags in search/i… Security Audit #487: Commit 8bfe6e1 pushed by mnriem
20s main
main
20s
fix: correct nullable resolved directory annotation (#3771) Security Audit #486: Commit a482fb2 pushed by mnriem
39s main
main
39s
fix(presets): escape user-supplied catalog name/URL in preset catalog add/remove output Security Audit #485: Pull request #3806 opened by jawwad-ali
23s jawwad-ali:fix-preset-catalog-markup
jawwad-ali:fix-preset-catalog-markup
23s
fix(presets): tolerate non-string and non-list catalog fields in pres… Security Audit #484: Commit 05cb3cb pushed by mnriem
29s main
main
29s
fix(integrations): don't abort uninstall when the manifest file can't be deleted Security Audit #483: Pull request #3805 opened by jawwad-ali
19s jawwad-ali:fix-uninstall-manifest-unlink
jawwad-ali:fix-uninstall-manifest-unlink
19s
fix(catalogs): validate the port in the shared catalog-URL validator, like its mirrors do Security Audit #482: Pull request #3804 opened by jawwad-ali
27s jawwad-ali:fix-catalog-url-port-validation
jawwad-ali:fix-catalog-url-port-validation
27s
fix(skills): match closing frontmatter delimiter on its own line Security Audit #481: Pull request #3739 synchronize by Quratulain-bilal
17s Quratulain-bilal:fix/skill-setup-frontmatter-dashes
Quratulain-bilal:fix/skill-setup-frontmatter-dashes
17s
fix: correct Optional type annotation for _resolved_dir parameter Security Audit #480: Pull request #3801 opened by Quratulain-bilal
22s Quratulain-bilal:fix/type-annotation-resolved-dir
Quratulain-bilal:fix/type-annotation-resolved-dir
22s
fix(integrations): escape catalog metadata in discovery output (#3772) Security Audit #479: Commit 2e44ed6 pushed by mnriem
20s main
main
20s
Update Verify Review Ship extension to v0.4.2 (#3792) Security Audit #478: Commit 999f8e6 pushed by mnriem
19s main
main
19s
fix(presets): tolerate non-string and non-list catalog fields in preset search/info Security Audit #477: Pull request #3769 synchronize by mnriem
22s Noor-ul-ain001:fix/preset-search-nonstring-fields
Noor-ul-ain001:fix/preset-search-nonstring-fields
22s
fix(cli): render the literal [suffix] in --tag help and rejection message Security Audit #476: Pull request #3800 synchronize by jawwad-ali
17s jawwad-ali:fix/tag-suffix-literal-brackets
jawwad-ali:fix/tag-suffix-literal-brackets
17s
fix(agents): coerce a non-string description in TOML command rendering Security Audit #475: Pull request #3799 synchronize by jawwad-ali
23s jawwad-ali:fix/toml-command-description-coercion
jawwad-ali:fix/toml-command-description-coercion
23s
fix(bundler): treat an explicit-null manifest field as missing, not the text "None" Security Audit #474: Pull request #3798 synchronize by jawwad-ali
23s jawwad-ali:fix/manifest-explicit-null-fields
jawwad-ali:fix/manifest-explicit-null-fields
23s
fix(extensions): guard the required manifest sections so one bad extension cannot break extension list Security Audit #473: Pull request #3797 synchronize by jawwad-ali
29s jawwad-ali:fix/extension-manifest-section-guards
jawwad-ali:fix/extension-manifest-section-guards
29s
fix(workflows): dispatch prompt steps via the resolved executable Security Audit #472: Pull request #3793 synchronize by jawwad-ali
22s jawwad-ali:fix/prompt-step-resolve-executable
jawwad-ali:fix/prompt-step-resolve-executable
22s
fix(init): escape user-supplied values in specify init output Security Audit #471: Pull request #3787 synchronize by jawwad-ali
29s jawwad-ali:fix/init-escape-user-values-in-output
jawwad-ali:fix/init-escape-user-values-in-output
29s
docs(core): SPECIFY_FEATURE sets the feature label, not the feature directory Security Audit #470: Pull request #3786 synchronize by jawwad-ali
15s jawwad-ali:docs/specify-feature-is-a-label
jawwad-ali:docs/specify-feature-is-a-label
15s
fix(scripts): tolerate an unusable integration.json in the Python helper Security Audit #469: Pull request #3785 synchronize by jawwad-ali
25s jawwad-ali:fix/python-helper-integration-json-guards
jawwad-ali:fix/python-helper-integration-json-guards
25s
ProTip! You can narrow down the results and go further in time using created:<2026-07-28 or the other filters available.