Add coverage gate, CycloneDX SBOM, and release attestations - #16

Merged

masarray merged 30 commits into

mainfrom

agent/coverage-sbom-provenance

Jul 12, 2026

Commits on Jul 12, 2026

Add pinned coverage collector
masarray
committed
a4fcc45
Enable cross-platform test coverage collection
masarray
committed
25abab6
Add deterministic coverage quality gate
masarray
committed
67f6a4f
Fix coverage test argument assembly
masarray
committed
a53970b
Add deterministic CycloneDX SBOM generator
masarray
committed
89528e1
Fail CI and release builds on compiler warnings
masarray
committed
8cb189b
Add coverage evidence and warning gates to CI
masarray
committed
3d27337
Enforce warning-free test compilation
masarray
committed
9d3e190
Require warning-free CodeQL build
masarray
committed
06b4a2b
Add SBOM, pinned installer tool, and release attestations
masarray
committed
7cdb630
Document SBOM, provenance, and coverage gates
masarray
committed
4757885
Document coverage, SBOM, and release provenance
masarray
committed
d0e077c
Record coverage, SBOM, and provenance hardening
masarray
committed
413e69e
Expand public release verification checklist
masarray
committed
0dc2641
Measure linked engine source in test assembly
masarray
committed
705fe20
Add explicit Coverlet runsettings
masarray
committed
a3e0da9
Use explicit coverage runsettings
masarray
committed
b0eb794
Use Coverlet MSBuild instrumentation
masarray
committed
52925cb
Use Coverlet MSBuild instrumentation
masarray
committed
59f3a3b
Collect coverage through MSBuild instrumentation
masarray
committed
3f0a05c
Remove unused collector runsettings
masarray
committed
15eccaa
Keep exact Inno package pin without brittle file metadata gate
masarray
committed
5a70ac1
Force linked engine test assembly instrumentation
masarray
committed
cd86d58
Raise verified coverage regression floor to 50 percent
masarray
committed
e0e2e69
Enforce 50 percent line coverage floor
masarray
committed
44d6ce9
Document verified 50 percent coverage floor
masarray
committed
62d4e85
Limit SBOM to shipped applications and stabilize output
masarray
committed
3e52fa9
Document verified coverage and application-only SBOM
masarray
committed
ceb5f3c
Record verified coverage and application-only SBOM
masarray
committed
f3dbe9f
Reject test-only packages from release SBOM
masarray
committed
18f9455

Navigation Menu

Add coverage gate, CycloneDX SBOM, and release attestations - #16

Add coverage gate, CycloneDX SBOM, and release attestations#16
masarray merged 30 commits into
mainfrom
agent/coverage-sbom-provenance

Commits on Jul 12, 2026

Add pinned coverage collector

Enable cross-platform test coverage collection

Add deterministic coverage quality gate

Fix coverage test argument assembly

Add deterministic CycloneDX SBOM generator

Fail CI and release builds on compiler warnings

Add coverage evidence and warning gates to CI

Enforce warning-free test compilation

Require warning-free CodeQL build

Add SBOM, pinned installer tool, and release attestations

Document SBOM, provenance, and coverage gates

Document coverage, SBOM, and release provenance

Record coverage, SBOM, and provenance hardening

Expand public release verification checklist

Measure linked engine source in test assembly

Add explicit Coverlet runsettings

Use explicit coverage runsettings

Use Coverlet MSBuild instrumentation

Use Coverlet MSBuild instrumentation

Collect coverage through MSBuild instrumentation

Remove unused collector runsettings

Keep exact Inno package pin without brittle file metadata gate

Force linked engine test assembly instrumentation

Raise verified coverage regression floor to 50 percent

Enforce 50 percent line coverage floor

Document verified 50 percent coverage floor

Limit SBOM to shipped applications and stabilize output

Document verified coverage and application-only SBOM

Record verified coverage and application-only SBOM

Reject test-only packages from release SBOM