2026-10-16T12:29:41.319Z Diffinery runner: job e2e (End-to-end (security)) for codician/diffinery@aad5ee6120a4 2026-10-16T12:29:41.392Z Runner: image diffinery-runner:2a3052eff7a82a483a7fde51, in lhr19, WEUR, container da4731e5f89189b5916b8542e28c8f42b0b29b71b2158a35a47c552640545e15 2026-10-16T12:29:41.392Z Workspace: /workspace/diffinery 2026-10-16T12:29:41.473Z ##[group]Run actions/checkout@v4 2026-10-16T12:29:41.473Z ##[endgroup] 2026-10-16T12:29:41.475Z Syncing repository: codician/diffinery 2026-10-16T12:29:41.543Z Fetching the repository (depth 1) 2026-10-16T12:29:42.473Z remote: Enumerating objects: 597, done. 2026-10-16T12:29:42.954Z Receiving objects: 0% (1/597) Receiving objects: 1% (6/597) Receiving objects: 2% (12/597) Receiving objects: 3% (18/597) Receiving objects: 4% (24/597) Receiving objects: 5% (30/597) Receiving objects: 6% (36/597) Receiving objects: 7% (42/597) Receiving objects: 8% (48/597) Receiving objects: 9% (54/597) Receiving objects: 10% (60/597) Receiving objects: 11% (66/597) Receiving objects: 12% (72/597) Receiving objects: 13% (78/597) Receiving objects: 14% (84/597) Receiving objects: 15% (90/597) Receiving objects: 16% (96/597) Receiving objects: 17% (102/597) Receiving objects: 18% (108/597) Receiving objects: 19% (114/597) Receiving objects: 20% (120/597) Receiving objects: 21% (126/597) Receiving objects: 22% (132/597) Receiving objects: 23% (138/597) Receiving objects: 24% (144/597) Receiving objects: 25% (150/597) Receiving objects: 26% (156/597) Receiving objects: 27% (162/597) Receiving objects: 28% (168/597) Receiving objects: 29% (174/597) Receiving objects: 30% (180/597) Receiving objects: 31% (186/597) Receiving objects: 32% (192/597) Receiving objects: 33% (198/597) Receiving objects: 34% (203/597) Receiving objects: 35% (209/597) Receiving objects: 36% (215/597) Receiving objects: 37% (221/597) Receiving objects: 38% (227/597) Receiving objects: 39% (233/597) Receiving objects: 40% (239/597) Receiving objects: 41% (245/597) Receiving objects: 42% (251/597) Receiving objects: 43% (257/597) Receiving objects: 44% (263/597) Receiving objects: 45% (269/597) Receiving objects: 46% (275/597) Receiving objects: 47% (281/597) Receiving objects: 48% (287/597) Receiving objects: 49% (293/597) Receiving objects: 50% (299/597) Receiving objects: 51% (305/597) Receiving objects: 52% (311/597) Receiving objects: 53% (317/597) Receiving objects: 54% (323/597) Receiving objects: 55% (329/597) Receiving objects: 56% (335/597) Receiving objects: 57% (341/597) Receiving objects: 58% (347/597) Receiving objects: 59% (353/597) Receiving objects: 60% (359/597) Receiving objects: 61% (365/597) Receiving objects: 62% (371/597) Receiving objects: 63% (377/597) Receiving objects: 64% (383/597) Receiving objects: 65% (389/597) Receiving objects: 66% (395/597) Receiving objects: 67% (400/597) Receiving objects: 68% (406/597) Receiving objects: 69% (412/597) Receiving objects: 70% (418/597) Receiving objects: 71% (424/597) Receiving objects: 72% (430/597) Receiving objects: 73% (436/597) Receiving objects: 74% (442/597) Receiving objects: 75% (448/597) Receiving objects: 76% (454/597) Receiving objects: 77% (460/597) Receiving objects: 78% (466/597) Receiving objects: 79% (472/597) Receiving objects: 80% (478/597) Receiving objects: 81% (484/597) Receiving objects: 82% (490/597) Receiving objects: 83% (496/597) Receiving objects: 84% (502/597) Receiving objects: 85% (508/597) Receiving objects: 86% (514/597) Receiving objects: 87% (520/597) Receiving objects: 88% (526/597) Receiving objects: 89% (532/597) Receiving objects: 90% (538/597) Receiving objects: 91% (544/597) Receiving objects: 92% (550/597) Receiving objects: 93% (556/597) Receiving objects: 94% (562/597) Receiving objects: 95% (568/597) Receiving objects: 96% (574/597) remote: Total 597 (delta 0), reused 597 (delta 0) 2026-10-16T12:29:42.956Z Receiving objects: 97% (580/597) Receiving objects: 98% (586/597) Receiving objects: 99% (592/597) Receiving objects: 100% (597/597) Receiving objects: 100% (597/597), 2.43 MiB | 5.07 MiB/s, done. 2026-10-16T12:29:42.966Z From https://diffinery.com/codician/diffinery 2026-10-16T12:29:42.966Z * [new ref] aad5ee6120a40a369534d774bb74e894ac78ce9d -> origin/diffinery-checkout 2026-10-16T12:29:43.041Z Note: switching to 'aad5ee6120a40a369534d774bb74e894ac78ce9d'. 2026-10-16T12:29:43.041Z 2026-10-16T12:29:43.041Z You are in 'detached HEAD' state. You can look around, make experimental 2026-10-16T12:29:43.041Z changes and commit them, and you can discard any commits you make in this 2026-10-16T12:29:43.041Z state without impacting any branches by switching back to a branch. 2026-10-16T12:29:43.041Z 2026-10-16T12:29:43.041Z If you want to create a new branch to retain commits you create, you may 2026-10-16T12:29:43.041Z do so (now or later) by using -c with the switch command. Example: 2026-10-16T12:29:43.041Z 2026-10-16T12:29:43.041Z git switch -c 2026-10-16T12:29:43.041Z 2026-10-16T12:29:43.041Z Or undo this operation with: 2026-10-16T12:29:43.041Z 2026-10-16T12:29:43.041Z git switch - 2026-10-16T12:29:43.041Z 2026-10-16T12:29:43.041Z Turn off this advice by setting config variable advice.detachedHead to false 2026-10-16T12:29:43.041Z 2026-10-16T12:29:43.041Z HEAD is now at aad5ee6 Merge af263678af3b42ef32f116dd313956bc4f108a95 into 1e9b201621af5e94bc0650cdc3703c4e533ac19d 2026-10-16T12:29:43.046Z HEAD is now at aad5ee6120a40a369534d774bb74e894ac78ce9d 2026-10-16T12:29:43.222Z Download action repository 'pnpm/action-setup@v4' 2026-10-16T12:29:43.552Z ##[group]Run pnpm/action-setup@v4 2026-10-16T12:29:43.552Z with: 2026-10-16T12:29:43.552Z dest: ~/setup-pnpm 2026-10-16T12:29:43.552Z run_install: null 2026-10-16T12:29:43.552Z cache: false 2026-10-16T12:29:43.552Z cache_dependency_path: pnpm-lock.yaml 2026-10-16T12:29:43.552Z package_json_file: package.json 2026-10-16T12:29:43.552Z standalone: false 2026-10-16T12:29:43.552Z ##[endgroup] 2026-10-16T12:29:43.765Z ##[group]Running self-installer... 2026-10-16T12:29:44.492Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-16T12:29:44.501Z Packages: +1 2026-10-16T12:29:44.501Z + 2026-10-16T12:29:45.047Z Progress: resolved 1, reused 0, downloaded 1, added 1, done 2026-10-16T12:29:45.075Z 2026-10-16T12:29:45.075Z dependencies: 2026-10-16T12:29:45.075Z + pnpm 10.28.0 (12.11.2 is available) 2026-10-16T12:29:45.075Z 2026-10-16T12:29:45.078Z Done in 1s 2026-10-16T12:29:45.101Z ##[endgroup] 2026-10-16T12:29:45.101Z Installation Completed! 2026-10-16T12:29:45.207Z ##[group]Run actions/setup-node@v4 2026-10-16T12:29:45.207Z with: 2026-10-16T12:29:45.207Z node-version: 22 2026-10-16T12:29:45.207Z cache: pnpm 2026-10-16T12:29:45.207Z ##[endgroup] 2026-10-16T12:29:45.215Z Found in cache @ 22.22.0 (pre-installed node satisfies '22') 2026-10-16T12:29:48.995Z Cache Size: ~215 MB (225870423 B) 2026-10-16T12:29:52.421Z Cache restored from key: node-cache-Linux-x64-pnpm-4b94436b86798d88b931ea24b5b847697aebf45520d6ef384cb382ce6c1f1e08 2026-10-16T12:29:52.938Z ##[group]Run pnpm install --frozen-lockfile 2026-10-16T12:29:52.938Z ##[endgroup] 2026-10-16T12:29:53.311Z Scope: all 7 workspace projects 2026-10-16T12:29:53.373Z Lockfile is up to date, resolution step is skipped 2026-10-16T12:29:53.418Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-16T12:29:53.455Z Packages: +248 2026-10-16T12:29:53.455Z ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2026-10-16T12:29:54.338Z Progress: resolved 248, reused 242, downloaded 0, added 248, done 2026-10-16T12:30:05.053Z 2026-10-16T12:30:05.053Z devDependencies: 2026-10-16T12:30:05.053Z + turbo 2.11.7 2026-10-16T12:30:05.053Z + typescript 5.9.3 2026-10-16T12:30:05.053Z 2026-10-16T12:30:05.383Z Done in 12.3s using pnpm v10.28.0 2026-10-16T12:30:05.599Z ##[group]Run pnpm -r --if-present build 2026-10-16T12:30:05.599Z ##[endgroup] 2026-10-16T12:30:05.963Z Scope: 6 of 7 workspace projects 2026-10-16T12:30:05.967Z apps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env node 2026-10-16T12:30:05.967Z import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-16T12:30:05.968Z apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjs 2026-10-16T12:30:05.968Z containers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-16T12:30:06.090Z apps/cli build: dist/diffinery.mjs 439.5kb 2026-10-16T12:30:06.092Z apps/cli build: ⚡ Done in 87ms 2026-10-16T12:30:06.099Z apps/cli build: Done 2026-10-16T12:30:06.124Z containers/runner build: dist/agent.mjs 657.3kb 2026-10-16T12:30:06.126Z containers/runner build: ⚡ Done in 96ms 2026-10-16T12:30:06.128Z containers/runner build: Done 2026-10-16T12:30:07.196Z apps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KB 2026-10-16T12:30:07.538Z apps/diffinery build: docs: 62 pages (+2 generated at runtime), CLI 0.1.0 (230 KiB) 2026-10-16T12:30:07.553Z apps/diffinery build: Done 2026-10-16T12:30:07.791Z ##[group]Run # Shards of similar length; a new test file runs in "rest" unless it's added to another. 2026-10-16T12:30:07.791Z core='/e2e\.test\.mjs$' 2026-10-16T12:30:07.791Z agents='/(agentic|review|tasks)\.test\.mjs$' 2026-10-16T12:30:07.791Z security='/(security|status)\.test\.mjs$' 2026-10-16T12:30:07.791Z # The core file's real histories and large pushes take minutes each (jquery's alone 2 to 3 on 2026-10-16T12:30:07.791Z # Diffinery's runners): two shards of their own, so no part of the file runs into node's 2026-10-16T12:30:07.791Z # per-file timeout, which is the --test-timeout here. 2026-10-16T12:30:07.791Z histories='^real histories:' 2026-10-16T12:30:07.791Z large='^(large files|large pushes):' 2026-10-16T12:30:07.791Z opts=(--test-timeout=600000) 2026-10-16T12:30:07.791Z case "security" in 2026-10-16T12:30:07.791Z core) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-skip-pattern="$histories" --test-skip-pattern="$large") ;; 2026-10-16T12:30:07.791Z histories) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts=(--test-timeout=900000 --test-name-pattern="$histories") ;; 2026-10-16T12:30:07.791Z large) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-name-pattern="$large") ;; 2026-10-16T12:30:07.791Z agents) files=$(ls test/e2e/*.test.mjs | grep -E "$agents") ;; 2026-10-16T12:30:07.791Z security) files=$(ls test/e2e/*.test.mjs | grep -E "$security") ;; 2026-10-16T12:30:07.791Z *) files=$(ls test/e2e/*.test.mjs | grep -vE "$core|$agents|$security") ;; 2026-10-16T12:30:07.791Z esac 2026-10-16T12:30:07.791Z echo "$files" 2026-10-16T12:30:07.791Z node --test --test-concurrency=1 "${opts[@]}" $files 2026-10-16T12:30:07.791Z ##[endgroup] 2026-10-16T12:30:09.053Z test/e2e/security.test.mjs 2026-10-16T12:30:09.053Z test/e2e/status.test.mjs 2026-10-16T12:30:09.145Z TAP version 13 2026-10-16T12:30:36.508Z # Subtest: security: search, required checks, environments, reviews, locks, archives, drafts and tree names 2026-10-16T12:30:36.509Z ok 1 - security: search, required checks, environments, reviews, locks, archives, drafts and tree names 2026-10-16T12:30:36.509Z --- 2026-10-16T12:30:36.509Z duration_ms: 27311.417072 2026-10-16T12:30:36.509Z type: 'test' 2026-10-16T12:30:36.509Z ... 2026-10-16T12:30:36.587Z # Subtest: security: organization admins can't hand out ownership 2026-10-16T12:30:36.587Z ok 2 - security: organization admins can't hand out ownership 2026-10-16T12:30:36.587Z --- 2026-10-16T12:30:36.587Z duration_ms: 78.629885 2026-10-16T12:30:36.587Z type: 'test' 2026-10-16T12:30:36.587Z ... 2026-10-16T12:30:37.894Z # Subtest: security: anonymous writes, token scopes, agent secrets, merge rules and drafts 2026-10-16T12:30:37.895Z ok 3 - security: anonymous writes, token scopes, agent secrets, merge rules and drafts 2026-10-16T12:30:37.895Z --- 2026-10-16T12:30:37.895Z duration_ms: 1307.241272 2026-10-16T12:30:37.895Z type: 'test' 2026-10-16T12:30:37.895Z ... 2026-10-16T12:30:38.352Z # Subtest: security: push protection covers commits made without git 2026-10-16T12:30:38.352Z ok 4 - security: push protection covers commits made without git 2026-10-16T12:30:38.352Z --- 2026-10-16T12:30:38.352Z duration_ms: 456.442973 2026-10-16T12:30:38.352Z type: 'test' 2026-10-16T12:30:38.352Z ... 2026-10-16T12:30:52.963Z # Subtest: security: limited tokens, invisible repositories, readers' labels and the audit trail 2026-10-16T12:30:52.963Z ok 5 - security: limited tokens, invisible repositories, readers' labels and the audit trail 2026-10-16T12:30:52.963Z --- 2026-10-16T12:30:52.963Z duration_ms: 14611.908169 2026-10-16T12:30:52.963Z type: 'test' 2026-10-16T12:30:52.963Z ... 2026-10-16T12:30:53.044Z # Subtest: security: organization pictures are the owners' to change, and invitations aren't sent twice 2026-10-16T12:30:53.044Z ok 6 - security: organization pictures are the owners' to change, and invitations aren't sent twice 2026-10-16T12:30:53.044Z --- 2026-10-16T12:30:53.044Z duration_ms: 81.364475 2026-10-16T12:30:53.044Z type: 'test' 2026-10-16T12:30:53.044Z ... 2026-10-16T12:30:53.403Z # Subtest: security: organization members get the base permission, which only owners change 2026-10-16T12:30:53.403Z ok 7 - security: organization members get the base permission, which only owners change 2026-10-16T12:30:53.403Z --- 2026-10-16T12:30:53.403Z duration_ms: 357.149629 2026-10-16T12:30:53.403Z type: 'test' 2026-10-16T12:30:53.403Z ... 2026-10-16T12:30:53.736Z # Subtest: security: leaving an organization takes its repository access along 2026-10-16T12:30:53.737Z ok 8 - security: leaving an organization takes its repository access along 2026-10-16T12:30:53.737Z --- 2026-10-16T12:30:53.737Z duration_ms: 335.14602 2026-10-16T12:30:53.737Z type: 'test' 2026-10-16T12:30:53.737Z ... 2026-10-16T12:30:57.885Z # Subtest: security: organization settings are checked before anything is saved, and agents see the base permission 2026-10-16T12:30:57.885Z ok 9 - security: organization settings are checked before anything is saved, and agents see the base permission 2026-10-16T12:30:57.885Z --- 2026-10-16T12:30:57.885Z duration_ms: 4147.336673 2026-10-16T12:30:57.885Z type: 'test' 2026-10-16T12:30:57.885Z ... 2026-10-16T12:31:04.372Z # Subtest: security: a transferred repository keeps its data, and its old name redirects only for readers 2026-10-16T12:31:04.372Z ok 10 - security: a transferred repository keeps its data, and its old name redirects only for readers 2026-10-16T12:31:04.372Z --- 2026-10-16T12:31:04.372Z duration_ms: 6486.151233 2026-10-16T12:31:04.372Z type: 'test' 2026-10-16T12:31:04.372Z ... 2026-10-16T12:31:18.396Z # Subtest: security: agents land changes on protected branches only through auto-merge a person allowed, gated by CI 2026-10-16T12:31:18.396Z ok 11 - security: agents land changes on protected branches only through auto-merge a person allowed, gated by CI 2026-10-16T12:31:18.396Z --- 2026-10-16T12:31:18.396Z duration_ms: 14024.679354 2026-10-16T12:31:18.396Z type: 'test' 2026-10-16T12:31:18.396Z ... 2026-10-16T12:31:29.208Z # Subtest: security: an admin can let agents' auto-merges land on green checks without an approval, and nothing more 2026-10-16T12:31:29.208Z ok 12 - security: an admin can let agents' auto-merges land on green checks without an approval, and nothing more 2026-10-16T12:31:29.208Z --- 2026-10-16T12:31:29.208Z duration_ms: 10812.586396 2026-10-16T12:31:29.208Z type: 'test' 2026-10-16T12:31:29.208Z ... 2026-10-16T12:31:29.811Z # Subtest: security: an archived repository lands nothing by itself: archiving ends auto-merge and empties the merge queue 2026-10-16T12:31:29.811Z ok 13 - security: an archived repository lands nothing by itself: archiving ends auto-merge and empties the merge queue 2026-10-16T12:31:29.811Z --- 2026-10-16T12:31:29.811Z duration_ms: 602.953824 2026-10-16T12:31:29.811Z type: 'test' 2026-10-16T12:31:29.811Z ... 2026-10-16T12:31:31.083Z # Subtest: security: landing a pull request deletes its head branch only when asked, through auto-merge and the queue too, and never a protected one 2026-10-16T12:31:31.083Z ok 14 - security: landing a pull request deletes its head branch only when asked, through auto-merge and the queue too, and never a protected one 2026-10-16T12:31:31.083Z --- 2026-10-16T12:31:31.083Z duration_ms: 1271.611984 2026-10-16T12:31:31.083Z type: 'test' 2026-10-16T12:31:31.083Z ... 2026-10-16T12:31:31.821Z # Subtest: security: agents see what auto-merge needs next to the refusal to merge directly 2026-10-16T12:31:31.821Z ok 15 - security: agents see what auto-merge needs next to the refusal to merge directly 2026-10-16T12:31:31.821Z --- 2026-10-16T12:31:31.821Z duration_ms: 737.310406 2026-10-16T12:31:31.821Z type: 'test' 2026-10-16T12:31:31.821Z ... 2026-10-16T12:31:34.498Z # Subtest: security: the queue's bypass button does what it says, and a merge queue can't contradict linear history 2026-10-16T12:31:34.498Z ok 16 - security: the queue's bypass button does what it says, and a merge queue can't contradict linear history 2026-10-16T12:31:34.498Z --- 2026-10-16T12:31:34.498Z duration_ms: 2677.607 2026-10-16T12:31:34.498Z type: 'test' 2026-10-16T12:31:34.498Z ... 2026-10-16T12:31:34.810Z # Subtest: security: no token can mint a token, an agent or a sandbox, through the API or the web forms 2026-10-16T12:31:34.811Z ok 17 - security: no token can mint a token, an agent or a sandbox, through the API or the web forms 2026-10-16T12:31:34.811Z --- 2026-10-16T12:31:34.811Z duration_ms: 312.676842 2026-10-16T12:31:34.811Z type: 'test' 2026-10-16T12:31:34.811Z ... 2026-10-16T12:31:40.874Z # Subtest: security: repository variable endpoints see only the repository's own, and organization variable deletes are checked 2026-10-16T12:31:40.874Z ok 18 - security: repository variable endpoints see only the repository's own, and organization variable deletes are checked 2026-10-16T12:31:40.874Z --- 2026-10-16T12:31:40.874Z duration_ms: 6063.137999 2026-10-16T12:31:40.874Z type: 'test' 2026-10-16T12:31:40.874Z ... 2026-10-16T12:31:41.136Z # Subtest: security: milestones are checked before an issue is saved, and lists filter by them 2026-10-16T12:31:41.136Z ok 19 - security: milestones are checked before an issue is saved, and lists filter by them 2026-10-16T12:31:41.136Z --- 2026-10-16T12:31:41.136Z duration_ms: 262.873855 2026-10-16T12:31:41.136Z type: 'test' 2026-10-16T12:31:41.136Z ... 2026-10-16T12:31:43.648Z # Subtest: security: push protection reads large files, and revoking a token through the API is on the record 2026-10-16T12:31:43.648Z ok 20 - security: push protection reads large files, and revoking a token through the API is on the record 2026-10-16T12:31:43.648Z --- 2026-10-16T12:31:43.648Z duration_ms: 2510.83495 2026-10-16T12:31:43.648Z type: 'test' 2026-10-16T12:31:43.648Z ... 2026-10-16T12:31:44.289Z # Subtest: security: git request bodies are bounded, compressed or not, before anything reads them 2026-10-16T12:31:44.289Z ok 21 - security: git request bodies are bounded, compressed or not, before anything reads them 2026-10-16T12:31:44.289Z --- 2026-10-16T12:31:44.289Z duration_ms: 640.447172 2026-10-16T12:31:44.289Z type: 'test' 2026-10-16T12:31:44.289Z ... 2026-10-16T12:31:44.816Z # Subtest: security: a file rewritten from scratch is diffed quickly, even for anonymous readers 2026-10-16T12:31:44.817Z ok 22 - security: a file rewritten from scratch is diffed quickly, even for anonymous readers 2026-10-16T12:31:44.817Z --- 2026-10-16T12:31:44.817Z duration_ms: 528.044339 2026-10-16T12:31:44.817Z type: 'test' 2026-10-16T12:31:44.817Z ... 2026-10-16T12:31:45.042Z # Subtest: security: signed out, a private repository and a missing one look the same everywhere 2026-10-16T12:31:45.042Z ok 23 - security: signed out, a private repository and a missing one look the same everywhere 2026-10-16T12:31:45.042Z --- 2026-10-16T12:31:45.042Z duration_ms: 225.008876 2026-10-16T12:31:45.042Z type: 'test' 2026-10-16T12:31:45.042Z ... 2026-10-16T12:31:45.683Z # Subtest: security: live updates say only that something changed, and never carry audit entries or payloads 2026-10-16T12:31:45.683Z ok 24 - security: live updates say only that something changed, and never carry audit entries or payloads 2026-10-16T12:31:45.683Z --- 2026-10-16T12:31:45.683Z duration_ms: 640.415462 2026-10-16T12:31:45.683Z type: 'test' 2026-10-16T12:31:45.683Z ... 2026-10-16T12:31:48.253Z # Subtest: security: push protection reads commit and tag messages, UTF-16 files and Diffinery's own tokens, and records opt-outs 2026-10-16T12:31:48.253Z ok 25 - security: push protection reads commit and tag messages, UTF-16 files and Diffinery's own tokens, and records opt-outs 2026-10-16T12:31:48.253Z --- 2026-10-16T12:31:48.253Z duration_ms: 2570.238307 2026-10-16T12:31:48.253Z type: 'test' 2026-10-16T12:31:48.253Z ... 2026-10-16T12:31:48.817Z # Subtest: security: required checks gate direct pushes to a protected branch, as on GitHub 2026-10-16T12:31:48.817Z ok 26 - security: required checks gate direct pushes to a protected branch, as on GitHub 2026-10-16T12:31:48.817Z --- 2026-10-16T12:31:48.817Z duration_ms: 563.424846 2026-10-16T12:31:48.817Z type: 'test' 2026-10-16T12:31:48.817Z ... 2026-10-16T12:31:49.012Z # Subtest: security: issue, pull request and comment text has GitHub's length limits 2026-10-16T12:31:49.012Z ok 27 - security: issue, pull request and comment text has GitHub's length limits 2026-10-16T12:31:49.012Z --- 2026-10-16T12:31:49.012Z duration_ms: 196.066598 2026-10-16T12:31:49.012Z type: 'test' 2026-10-16T12:31:49.012Z ... 2026-10-16T12:31:55.172Z # Subtest: security: deleting a repository deletes its stored objects too 2026-10-16T12:31:55.172Z ok 28 - security: deleting a repository deletes its stored objects too 2026-10-16T12:31:55.172Z --- 2026-10-16T12:31:55.172Z duration_ms: 6159.578762 2026-10-16T12:31:55.172Z type: 'test' 2026-10-16T12:31:55.172Z ... 2026-10-16T12:31:55.731Z # Subtest: security: pushes are checked like git's fsck: no '..' or '.git' entries, no unsafe .gitmodules 2026-10-16T12:31:55.731Z ok 29 - security: pushes are checked like git's fsck: no '..' or '.git' entries, no unsafe .gitmodules 2026-10-16T12:31:55.731Z --- 2026-10-16T12:31:55.731Z duration_ms: 558.811707 2026-10-16T12:31:55.731Z type: 'test' 2026-10-16T12:31:55.731Z ... 2026-10-16T12:31:56.355Z # Subtest: security: a job's runner gets only the secrets the job names 2026-10-16T12:31:56.355Z ok 30 - security: a job's runner gets only the secrets the job names 2026-10-16T12:31:56.355Z --- 2026-10-16T12:31:56.355Z duration_ms: 623.656463 2026-10-16T12:31:56.355Z type: 'test' 2026-10-16T12:31:56.355Z ... 2026-10-16T12:31:56.828Z # Subtest: security: runs of agent code get no repository secrets unless an admin allows it 2026-10-16T12:31:56.828Z ok 31 - security: runs of agent code get no repository secrets unless an admin allows it 2026-10-16T12:31:56.828Z --- 2026-10-16T12:31:56.828Z duration_ms: 473.366231 2026-10-16T12:31:56.828Z type: 'test' 2026-10-16T12:31:56.828Z ... 2026-10-16T12:31:57.158Z # Subtest: security: adding someone by email always invites them, so the address doesn't reveal their username and they agree first 2026-10-16T12:31:57.159Z ok 32 - security: adding someone by email always invites them, so the address doesn't reveal their username and they agree first 2026-10-16T12:31:57.159Z --- 2026-10-16T12:31:57.159Z duration_ms: 330.83229 2026-10-16T12:31:57.159Z type: 'test' 2026-10-16T12:31:57.159Z ... 2026-10-16T12:31:58.706Z # Subtest: security: a job's log is capped, and oversized workflow files aren't parsed 2026-10-16T12:31:58.706Z ok 33 - security: a job's log is capped, and oversized workflow files aren't parsed 2026-10-16T12:31:58.706Z --- 2026-10-16T12:31:58.706Z duration_ms: 1547.086868 2026-10-16T12:31:58.706Z type: 'test' 2026-10-16T12:31:58.706Z ... 2026-10-16T12:31:59.228Z # Subtest: security: a workflow's token can't use another repository's private packages, and a repository's name is its own 2026-10-16T12:31:59.228Z ok 34 - security: a workflow's token can't use another repository's private packages, and a repository's name is its own 2026-10-16T12:31:59.228Z --- 2026-10-16T12:31:59.228Z duration_ms: 521.876499 2026-10-16T12:31:59.228Z type: 'test' 2026-10-16T12:31:59.228Z ... 2026-10-16T12:31:59.905Z # Subtest: security: OIDC tokens name the environment a job deployed to, and carry ids that survive a reused name 2026-10-16T12:31:59.905Z ok 35 - security: OIDC tokens name the environment a job deployed to, and carry ids that survive a reused name 2026-10-16T12:31:59.905Z --- 2026-10-16T12:31:59.905Z duration_ms: 677.4454 2026-10-16T12:31:59.905Z type: 'test' 2026-10-16T12:31:59.905Z ... 2026-10-16T12:32:00.229Z # Subtest: security: sensitive actions need a recent sign-in, sessions end 90 days after it, and one browser can be signed out 2026-10-16T12:32:00.229Z ok 36 - security: sensitive actions need a recent sign-in, sessions end 90 days after it, and one browser can be signed out 2026-10-16T12:32:00.229Z --- 2026-10-16T12:32:00.229Z duration_ms: 324.182751 2026-10-16T12:32:00.229Z type: 'test' 2026-10-16T12:32:00.229Z ... 2026-10-16T12:32:01.076Z # Subtest: security: self-hosted runners register with a one-hour token and claim jobs with their own 2026-10-16T12:32:01.076Z ok 37 - security: self-hosted runners register with a one-hour token and claim jobs with their own 2026-10-16T12:32:01.076Z --- 2026-10-16T12:32:01.076Z duration_ms: 846.699839 2026-10-16T12:32:01.076Z type: 'test' 2026-10-16T12:32:01.076Z ... 2026-10-16T12:32:02.264Z # Subtest: security: an organization secret reaches only the repositories it's shared with 2026-10-16T12:32:02.264Z ok 38 - security: an organization secret reaches only the repositories it's shared with 2026-10-16T12:32:02.264Z --- 2026-10-16T12:32:02.264Z duration_ms: 1186.06421 2026-10-16T12:32:02.264Z type: 'test' 2026-10-16T12:32:02.264Z ... 2026-10-16T12:32:03.134Z # Subtest: security: an admin can purge objects a force-push left unreachable 2026-10-16T12:32:03.134Z ok 39 - security: an admin can purge objects a force-push left unreachable 2026-10-16T12:32:03.134Z --- 2026-10-16T12:32:03.134Z duration_ms: 868.949528 2026-10-16T12:32:03.134Z type: 'test' 2026-10-16T12:32:03.134Z ... 2026-10-16T12:32:03.688Z # Subtest: security: webhooks reach only public hosts other than Diffinery, at most 20 per repository 2026-10-16T12:32:03.688Z ok 40 - security: webhooks reach only public hosts other than Diffinery, at most 20 per repository 2026-10-16T12:32:03.688Z --- 2026-10-16T12:32:03.688Z duration_ms: 556.288257 2026-10-16T12:32:03.688Z type: 'test' 2026-10-16T12:32:03.688Z ... 2026-10-16T12:32:05.436Z # Subtest: security: invitations and test emails have limits, so an account can't be used to send mail in bulk 2026-10-16T12:32:05.437Z ok 41 - security: invitations and test emails have limits, so an account can't be used to send mail in bulk 2026-10-16T12:32:05.437Z --- 2026-10-16T12:32:05.437Z duration_ms: 1748.626615 2026-10-16T12:32:05.437Z type: 'test' 2026-10-16T12:32:05.437Z ... 2026-10-16T12:32:05.731Z # Subtest: security: inputs that were taken on trust are checked (collaborators, check links, paging, MCP batches, reserved names) 2026-10-16T12:32:05.731Z ok 42 - security: inputs that were taken on trust are checked (collaborators, check links, paging, MCP batches, reserved names) 2026-10-16T12:32:05.731Z --- 2026-10-16T12:32:05.731Z duration_ms: 294.136353 2026-10-16T12:32:05.731Z type: 'test' 2026-10-16T12:32:05.731Z ... 2026-10-16T12:32:18.239Z # Subtest: security: environment reviewers hold a deploy job until a listed person approves, and nobody else can 2026-10-16T12:32:18.241Z ok 43 - security: environment reviewers hold a deploy job until a listed person approves, and nobody else can 2026-10-16T12:32:18.241Z --- 2026-10-16T12:32:18.241Z duration_ms: 12507.511294 2026-10-16T12:32:18.241Z type: 'test' 2026-10-16T12:32:18.241Z ... 2026-10-16T12:32:19.118Z # Subtest: security: adding someone by username sends an invitation, and they get access only once they accept 2026-10-16T12:32:19.118Z ok 44 - security: adding someone by username sends an invitation, and they get access only once they accept 2026-10-16T12:32:19.118Z --- 2026-10-16T12:32:19.118Z duration_ms: 878.036098 2026-10-16T12:32:19.118Z type: 'test' 2026-10-16T12:32:19.118Z ... 2026-10-16T12:33:22.103Z # Subtest: security: per-account quotas on hosted minutes, hosted jobs at once, sandboxes and repositories 2026-10-16T12:33:22.103Z ok 45 - security: per-account quotas on hosted minutes, hosted jobs at once, sandboxes and repositories 2026-10-16T12:33:22.103Z --- 2026-10-16T12:33:22.103Z duration_ms: 62985.271216 2026-10-16T12:33:22.103Z type: 'test' 2026-10-16T12:33:22.103Z ... 2026-10-16T12:33:25.572Z # Subtest: security: a per-account storage quota refuses pushes, Git LFS and release asset uploads past it; reads and deletes keep working 2026-10-16T12:33:25.572Z ok 46 - security: a per-account storage quota refuses pushes, Git LFS and release asset uploads past it; reads and deletes keep working 2026-10-16T12:33:25.572Z --- 2026-10-16T12:33:25.572Z duration_ms: 3463.438453 2026-10-16T12:33:25.572Z type: 'test' 2026-10-16T12:33:25.572Z ... 2026-10-16T12:33:45.354Z # Subtest: security: kill switches suspend Actions for a repository or an account, and pause hosted compute on the instance 2026-10-16T12:33:45.354Z ok 47 - security: kill switches suspend Actions for a repository or an account, and pause hosted compute on the instance 2026-10-16T12:33:45.354Z --- 2026-10-16T12:33:45.354Z duration_ms: 19715.546345 2026-10-16T12:33:45.354Z type: 'test' 2026-10-16T12:33:45.354Z ... 2026-10-16T12:34:04.363Z # Subtest: status page: anyone can read it, and everything is operational at first 2026-10-16T12:34:04.363Z ok 48 - status page: anyone can read it, and everything is operational at first 2026-10-16T12:34:04.363Z --- 2026-10-16T12:34:04.363Z duration_ms: 18824.892628 2026-10-16T12:34:04.363Z type: 'test' 2026-10-16T12:34:04.363Z ... 2026-10-16T12:34:04.455Z # Subtest: status page: only site administrators can manage incidents (404 for anyone else) 2026-10-16T12:34:04.455Z ok 49 - status page: only site administrators can manage incidents (404 for anyone else) 2026-10-16T12:34:04.455Z --- 2026-10-16T12:34:04.455Z duration_ms: 92.863214 2026-10-16T12:34:04.455Z type: 'test' 2026-10-16T12:34:04.455Z ... 2026-10-16T12:34:04.535Z # Subtest: status page: a site administrator opens an incident through the API, and the page shows it 2026-10-16T12:34:04.535Z ok 50 - status page: a site administrator opens an incident through the API, and the page shows it 2026-10-16T12:34:04.535Z --- 2026-10-16T12:34:04.535Z duration_ms: 78.693896 2026-10-16T12:34:04.535Z type: 'test' 2026-10-16T12:34:04.535Z ... 2026-10-16T12:34:04.770Z # Subtest: status page: the web form opens an incident with several components and posts updates 2026-10-16T12:34:04.771Z ok 51 - status page: the web form opens an incident with several components and posts updates 2026-10-16T12:34:04.771Z --- 2026-10-16T12:34:04.771Z duration_ms: 237.206195 2026-10-16T12:34:04.771Z type: 'test' 2026-10-16T12:34:04.771Z ... 2026-10-16T12:34:04.835Z # Subtest: status page: resolving through the API returns the component to operational and moves the incident to past incidents 2026-10-16T12:34:04.835Z ok 52 - status page: resolving through the API returns the component to operational and moves the incident to past incidents 2026-10-16T12:34:04.835Z --- 2026-10-16T12:34:04.835Z duration_ms: 64.969027 2026-10-16T12:34:04.835Z type: 'test' 2026-10-16T12:34:04.835Z ... 2026-10-16T12:34:04.854Z # Subtest: status page: changes are audited without the updates' text 2026-10-16T12:34:04.854Z ok 53 - status page: changes are audited without the updates' text 2026-10-16T12:34:04.854Z --- 2026-10-16T12:34:04.854Z duration_ms: 18.408389 2026-10-16T12:34:04.854Z type: 'test' 2026-10-16T12:34:04.854Z ... 2026-10-16T12:34:04.939Z # Subtest: status page: pausing hosted compute shows Actions and agent sandboxes under maintenance 2026-10-16T12:34:04.939Z ok 54 - status page: pausing hosted compute shows Actions and agent sandboxes under maintenance 2026-10-16T12:34:04.939Z --- 2026-10-16T12:34:04.939Z duration_ms: 79.322196 2026-10-16T12:34:04.939Z type: 'test' 2026-10-16T12:34:04.939Z ... 2026-10-16T12:34:05.004Z 1..54 2026-10-16T12:34:05.004Z # tests 54 2026-10-16T12:34:05.004Z # suites 0 2026-10-16T12:34:05.004Z # pass 54 2026-10-16T12:34:05.004Z # fail 0 2026-10-16T12:34:05.004Z # cancelled 0 2026-10-16T12:34:05.004Z # skipped 0 2026-10-16T12:34:05.004Z # todo 0 2026-10-16T12:34:05.005Z # duration_ms 235884.93444 2026-10-16T12:34:05.171Z Cache hit occurred on the primary key node-cache-Linux-x64-pnpm-4b94436b86798d88b931ea24b5b847697aebf45520d6ef384cb382ce6c1f1e08, not saving cache. 2026-10-16T12:34:05.496Z Pruning is unnecessary. 2026-10-16T12:34:05.602Z Removing persisted credentials 2026-10-16T12:34:05.650Z Job completed with conclusion: success