ci: adopt OmniRoute CI hardening for #3194

87c1de2

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

Dependency review on: pull_request 1

review

Dependabot auto-merge on: pull_request

compatible-update

Quality on: pull_request 7

Pick CI executor / Pick CI executor

Public repository safety

Public repository safety (GitHub-hosted)

Design lab is read-only

Design lab is read-only (GitHub-hosted)

Go formatting

Go formatting (GitHub-hosted)

Test (all modules)

Test (${{ matrix.module }})

Dashboard frontend (next)

Dashboard frontend (next) (GitHub-hosted)

Dashboard-next browser matrix

Dashboard-next browser matrix (GitHub-hosted)

Dashboard backend-service (Rust)

Dashboard backend-service (Rust) (GitHub-hosted)

Vendored Xore/theme is in sync

Vendored Xore/theme is in sync (GitHub-hosted)

Python syntax

Dionaea log rotation patch (#1389)

Conpot JSON log rotation patch (#2892)

Galah JSON log rotation patch (#2892)

Beelzebub JSON log rotation patch (#2892)

HellPot X-Forwarded-For trust patch (#1876)

Mailoney JSON-line sink patches (#1422, #2197)

Sensor timestamps carry explicit UTC sources (#2197)

JSON sink retention parity (#120, #2196, #2216)

Cowrie txtcmds overlay priority patch (#2926)

Compose interpolation documented per stack (#1982)

Healthcheck/autoheal label pairing (#2051)

WORKER_LOOPS consumers carry the apiary-backend auth pair (#2320)

Docs cite moved trees by their real home (#2352)

Sandbox shell tests (#2268,

Zeek lab/prod build pin parity (#2456)

Docs cite existing repo paths (#2458)

Docs regression tests (#2576)

Dionaea SMB exploit-signature incidents (#622,

Ghidra worker, spool discipline and AI triage

Real-data session probe metadata honesty (#2387)

Statictools lief contract (#2072)

Guarded LLM worker contracts

ml-worker anomaly pipeline contracts

auth-events-worker Keycloak pagination contracts

es-results-importer chunked-upload and dedup contracts

Persona application is idempotent

services-adapter allowlist enforcement

Sandbox guest string-cleaning filter (#530)

Windows sandbox orchestrator suites (#482,

GHOSTS sandbox orchestrator suites (#2252)

Shell syntax and high-severity ShellCheck

Validate Keycloak realm policy

Keycloak realm imports cleanly into a real Postgres

oauth2-proxy gateway pattern is resilient

Set up Node for the dashboard OIDC suites

Build dashboard-next BFF once for both OIDC suites

OIDC PKCE+TOTP login suite (port of

Keycloak outage/restart/rotation chaos suite (port of

GitHub-analysis publisher stays dry-run by default

Threat-intel CIDR refresh script (#244)

backup-honeypot dump discipline, retention order and umask (#2024,

honeypot-30d ILM policy rolls over and deletes (#585)

geoip-honeypot ingest pipeline (#563)

dionaea-incidents index template (#565)

conpot persona extraction in geoip-honeypot pipeline (#567)

Shared GPU job queue

Shared ES consume patterns (#1971)

Payload/artifact dedupe (#481/#528)

analyze.py sanitisation and stats hygiene (#1984,

Agent-intrusion synthetic replay corpus (#154 phase 1)

Agent-intrusion decode/correlate pipeline (#154 phase 2)

Agent-intrusion campaign correlator (#154 phase 2)

Agent-intrusion criticality rules (#154 phase 3)

Agent-intrusion campaign worker (#154 phase 5)

Sandbox VNC bridge read-only enforcement (#805)

Vendored YARA corpus is intact and loadable

Rev-eng benchmark corpus is reproducible and safe (#159)

Validate home and VPS Compose

scripts/tests suite

Go formatting and tests

Scripts and Compose

CodeQL on: pull_request 1

Pick CI executor / Pick CI executor

Analyze go

Analyze javascript-typescript

Analyze python

Containers on: pull_request

Pick CI executor / Pick CI executor

agent-intrusion-worker

backend-service

cisco-asa-honeypot

citrix-honeypot

conpot

dashboard-next

dicompot

dionaea

dnp3-honeypot

dns-honeypot

endlessh-honeypot

http-honeypot

llm-worker

multipot

portbridge

rdp-honeypot

sonicwall-sma-honeypot

tftp-relay

vps-portbridge

Code scanning results

CodeQL

Cache cleanup on: pull_request 1

Delete this PR's caches

Select a check to view from the sidebar