2026-10-16T12:37:32.466Z Diffinery runner: job e2e (End-to-end (security)) for codician/diffinery@b79522c9667f
2026-10-16T12:37:32.473Z Runner: image diffinery-runner:2a3052eff7a82a483a7fde51, in cdg14, WEUR, container d03709426c82ac7c351f0eec9e1c80b890bf87cc4d56155bdbf5d3b404054627
2026-10-16T12:37:32.473Z Workspace: /workspace/diffinery
2026-10-16T12:37:32.522Z ##[group]Run actions/checkout@v4
2026-10-16T12:37:32.522Z ##[endgroup]
2026-10-16T12:37:32.524Z Syncing repository: codician/diffinery
2026-10-16T12:37:32.574Z Fetching the repository (depth 1)
2026-10-16T12:37:33.335Z remote: Enumerating objects: 597, done.        
2026-10-16T12:37:33.645Z Receiving objects:   0% (1/597)
Receiving objects:   1% (6/597)
Receiving objects:   2% (12/597)
Receiving objects:   3% (18/597)
Receiving objects:   4% (24/597)
Receiving objects:   5% (30/597)
Receiving objects:   6% (36/597)
Receiving objects:   7% (42/597)
Receiving objects:   8% (48/597)
Receiving objects:   9% (54/597)
Receiving objects:  10% (60/597)
Receiving objects:  11% (66/597)
Receiving objects:  12% (72/597)
Receiving objects:  13% (78/597)
Receiving objects:  14% (84/597)
Receiving objects:  15% (90/597)
Receiving objects:  16% (96/597)
Receiving objects:  17% (102/597)
Receiving objects:  18% (108/597)
Receiving objects:  19% (114/597)
Receiving objects:  20% (120/597)
Receiving objects:  21% (126/597)
Receiving objects:  22% (132/597)
Receiving objects:  23% (138/597)
Receiving objects:  24% (144/597)
Receiving objects:  25% (150/597)
Receiving objects:  26% (156/597)
Receiving objects:  27% (162/597)
Receiving objects:  28% (168/597)
Receiving objects:  29% (174/597)
Receiving objects:  30% (180/597)
Receiving objects:  31% (186/597)
Receiving objects:  32% (192/597)
Receiving objects:  33% (198/597)
Receiving objects:  34% (203/597)
Receiving objects:  35% (209/597)
Receiving objects:  36% (215/597)
Receiving objects:  37% (221/597)
Receiving objects:  38% (227/597)
Receiving objects:  39% (233/597)
Receiving objects:  40% (239/597)
Receiving objects:  41% (245/597)
Receiving objects:  42% (251/597)
Receiving objects:  43% (257/597)
Receiving objects:  44% (263/597)
Receiving objects:  45% (269/597)
Receiving objects:  46% (275/597)
Receiving objects:  47% (281/597)
Receiving objects:  48% (287/597)
Receiving objects:  49% (293/597)
Receiving objects:  50% (299/597)
Receiving objects:  51% (305/597)
Receiving objects:  52% (311/597)
Receiving objects:  53% (317/597)
Receiving objects:  54% (323/597)
Receiving objects:  55% (329/597)
Receiving objects:  56% (335/597)
Receiving objects:  57% (341/597)
Receiving objects:  58% (347/597)
Receiving objects:  59% (353/597)
Receiving objects:  60% (359/597)
Receiving objects:  61% (365/597)
Receiving objects:  62% (371/597)
Receiving objects:  63% (377/597)
Receiving objects:  64% (383/597)
Receiving objects:  65% (389/597)
Receiving objects:  66% (395/597)
Receiving objects:  67% (400/597)
Receiving objects:  68% (406/597)
Receiving objects:  69% (412/597)
Receiving objects:  70% (418/597)
Receiving objects:  71% (424/597)
Receiving objects:  72% (430/597)
Receiving objects:  73% (436/597)
Receiving objects:  74% (442/597)
Receiving objects:  75% (448/597)
Receiving objects:  76% (454/597)
Receiving objects:  77% (460/597)
Receiving objects:  78% (466/597)
Receiving objects:  79% (472/597)
Receiving objects:  80% (478/597)
Receiving objects:  81% (484/597)
Receiving objects:  82% (490/597)
Receiving objects:  83% (496/597)
Receiving objects:  84% (502/597)
Receiving objects:  85% (508/597)
Receiving objects:  86% (514/597)
Receiving objects:  87% (520/597)
Receiving objects:  88% (526/597)
Receiving objects:  89% (532/597)
Receiving objects:  90% (538/597)
Receiving objects:  91% (544/597)
Receiving objects:  92% (550/597)
Receiving objects:  93% (556/597)
Receiving objects:  94% (562/597)
Receiving objects:  95% (568/597)
Receiving objects:  96% (574/597)
remote: Total 597 (delta 0), reused 597 (delta 0)        
2026-10-16T12:37:33.647Z Receiving objects:  97% (580/597)
Receiving objects:  98% (586/597)
Receiving objects:  99% (592/597)
Receiving objects: 100% (597/597)
Receiving objects: 100% (597/597), 2.43 MiB | 12.01 MiB/s, done.
2026-10-16T12:37:33.672Z From https://diffinery.com/codician/diffinery
2026-10-16T12:37:33.672Z  * [new ref]         b79522c9667f13a86441e4f02ce583bd74559fbe -> origin/main
2026-10-16T12:37:33.766Z Switched to a new branch 'main'
2026-10-16T12:37:33.771Z HEAD is now at b79522c9667f13a86441e4f02ce583bd74559fbe
2026-10-16T12:37:33.872Z Download action repository 'pnpm/action-setup@v4'
2026-10-16T12:37:34.292Z ##[group]Run pnpm/action-setup@v4
2026-10-16T12:37:34.292Z with:
2026-10-16T12:37:34.292Z   dest: ~/setup-pnpm
2026-10-16T12:37:34.292Z   run_install: null
2026-10-16T12:37:34.292Z   cache: false
2026-10-16T12:37:34.292Z   cache_dependency_path: pnpm-lock.yaml
2026-10-16T12:37:34.292Z   package_json_file: package.json
2026-10-16T12:37:34.292Z   standalone: false
2026-10-16T12:37:34.292Z ##[endgroup]
2026-10-16T12:37:34.482Z ##[group]Running self-installer...
2026-10-16T12:37:35.248Z Progress: resolved 1, reused 0, downloaded 0, added 0
2026-10-16T12:37:35.257Z Packages: +1
2026-10-16T12:37:35.257Z +
2026-10-16T12:37:35.900Z Progress: resolved 1, reused 0, downloaded 1, added 1, done
2026-10-16T12:37:35.934Z 
2026-10-16T12:37:35.934Z dependencies:
2026-10-16T12:37:35.934Z + pnpm 10.28.0 (12.11.2 is available)
2026-10-16T12:37:35.934Z 
2026-10-16T12:37:35.938Z Done in 1.1s
2026-10-16T12:37:35.962Z ##[endgroup]
2026-10-16T12:37:35.962Z Installation Completed!
2026-10-16T12:37:36.064Z ##[group]Run actions/setup-node@v4
2026-10-16T12:37:36.064Z with:
2026-10-16T12:37:36.064Z   node-version: 22
2026-10-16T12:37:36.064Z   cache: pnpm
2026-10-16T12:37:36.064Z ##[endgroup]
2026-10-16T12:37:36.072Z Found in cache @ 22.22.0 (pre-installed node satisfies '22')
2026-10-16T12:37:39.850Z Cache Size: ~215 MB (225870423 B)
2026-10-16T12:37:43.685Z Cache restored from key: node-cache-Linux-x64-pnpm-4b94436b86798d88b931ea24b5b847697aebf45520d6ef384cb382ce6c1f1e08
2026-10-16T12:37:43.790Z ##[group]Run pnpm install --frozen-lockfile
2026-10-16T12:37:43.790Z ##[endgroup]
2026-10-16T12:37:44.233Z Scope: all 7 workspace projects
2026-10-16T12:37:44.312Z Lockfile is up to date, resolution step is skipped
2026-10-16T12:37:44.363Z Progress: resolved 1, reused 0, downloaded 0, added 0
2026-10-16T12:37:44.420Z Packages: +248
2026-10-16T12:37:44.420Z ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
2026-10-16T12:37:45.297Z Progress: resolved 248, reused 242, downloaded 0, added 248, done
2026-10-16T12:37:54.791Z 
2026-10-16T12:37:54.791Z devDependencies:
2026-10-16T12:37:54.791Z + turbo 2.11.7
2026-10-16T12:37:54.791Z + typescript 5.9.3
2026-10-16T12:37:54.791Z 
2026-10-16T12:37:55.089Z Done in 11.2s using pnpm v10.28.0
2026-10-16T12:37:55.272Z ##[group]Run pnpm -r --if-present build
2026-10-16T12:37:55.272Z ##[endgroup]
2026-10-16T12:37:55.716Z Scope: 6 of 7 workspace projects
2026-10-16T12:37:55.721Z apps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env node
2026-10-16T12:37:55.721Z import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"
2026-10-16T12:37:55.722Z containers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"
2026-10-16T12:37:55.722Z apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjs
2026-10-16T12:37:55.822Z containers/runner build:   dist/agent.mjs  657.3kb
2026-10-16T12:37:55.822Z containers/runner build: ⚡ Done in 77ms
2026-10-16T12:37:55.825Z apps/cli build:   dist/diffinery.mjs  439.5kb
2026-10-16T12:37:55.826Z apps/cli build: ⚡ Done in 85ms
2026-10-16T12:37:55.830Z containers/runner build: Done
2026-10-16T12:37:55.832Z apps/cli build: Done
2026-10-16T12:37:56.680Z apps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KB
2026-10-16T12:37:57.012Z apps/diffinery build: docs: 62 pages (+2 generated at runtime), CLI 0.1.0 (230 KiB)
2026-10-16T12:37:57.021Z apps/diffinery build: Done
2026-10-16T12:37:57.201Z ##[group]Run # Shards of similar length; a new test file runs in "rest" unless it's added to another.
2026-10-16T12:37:57.201Z core='/e2e\.test\.mjs$'
2026-10-16T12:37:57.201Z agents='/(agentic|review|tasks)\.test\.mjs$'
2026-10-16T12:37:57.201Z security='/(security|status)\.test\.mjs$'
2026-10-16T12:37:57.201Z # The core file's real histories and large pushes take minutes each (jquery's alone 2 to 3 on
2026-10-16T12:37:57.201Z # Diffinery's runners): two shards of their own, so no part of the file runs into node's
2026-10-16T12:37:57.201Z # per-file timeout, which is the --test-timeout here.
2026-10-16T12:37:57.201Z histories='^real histories:'
2026-10-16T12:37:57.201Z large='^(large files|large pushes):'
2026-10-16T12:37:57.201Z opts=(--test-timeout=600000)
2026-10-16T12:37:57.201Z case "security" in
2026-10-16T12:37:57.201Z   core) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-skip-pattern="$histories" --test-skip-pattern="$large") ;;
2026-10-16T12:37:57.201Z   histories) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts=(--test-timeout=900000 --test-name-pattern="$histories") ;;
2026-10-16T12:37:57.201Z   large) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-name-pattern="$large") ;;
2026-10-16T12:37:57.201Z   agents) files=$(ls test/e2e/*.test.mjs | grep -E "$agents") ;;
2026-10-16T12:37:57.201Z   security) files=$(ls test/e2e/*.test.mjs | grep -E "$security") ;;
2026-10-16T12:37:57.201Z   *) files=$(ls test/e2e/*.test.mjs | grep -vE "$core|$agents|$security") ;;
2026-10-16T12:37:57.201Z esac
2026-10-16T12:37:57.201Z echo "$files"
2026-10-16T12:37:57.201Z node --test --test-concurrency=1 "${opts[@]}" $files
2026-10-16T12:37:57.201Z ##[endgroup]
2026-10-16T12:37:57.216Z test/e2e/security.test.mjs
2026-10-16T12:37:57.216Z test/e2e/status.test.mjs
2026-10-16T12:37:57.259Z TAP version 13
2026-10-16T12:38:27.083Z # Subtest: security: search, required checks, environments, reviews, locks, archives, drafts and tree names
2026-10-16T12:38:27.083Z ok 1 - security: search, required checks, environments, reviews, locks, archives, drafts and tree names
2026-10-16T12:38:27.084Z   ---
2026-10-16T12:38:27.084Z   duration_ms: 29765.781681
2026-10-16T12:38:27.084Z   type: 'test'
2026-10-16T12:38:27.084Z   ...
2026-10-16T12:38:27.178Z # Subtest: security: organization admins can't hand out ownership
2026-10-16T12:38:27.178Z ok 2 - security: organization admins can't hand out ownership
2026-10-16T12:38:27.178Z   ---
2026-10-16T12:38:27.178Z   duration_ms: 94.970861
2026-10-16T12:38:27.178Z   type: 'test'
2026-10-16T12:38:27.178Z   ...
2026-10-16T12:38:28.807Z # Subtest: security: anonymous writes, token scopes, agent secrets, merge rules and drafts
2026-10-16T12:38:28.807Z ok 3 - security: anonymous writes, token scopes, agent secrets, merge rules and drafts
2026-10-16T12:38:28.807Z   ---
2026-10-16T12:38:28.807Z   duration_ms: 1629.058629
2026-10-16T12:38:28.807Z   type: 'test'
2026-10-16T12:38:28.807Z   ...
2026-10-16T12:38:29.732Z # Subtest: security: push protection covers commits made without git
2026-10-16T12:38:29.732Z ok 4 - security: push protection covers commits made without git
2026-10-16T12:38:29.732Z   ---
2026-10-16T12:38:29.732Z   duration_ms: 922.657367
2026-10-16T12:38:29.732Z   type: 'test'
2026-10-16T12:38:29.732Z   ...
2026-10-16T12:38:45.977Z # Subtest: security: limited tokens, invisible repositories, readers' labels and the audit trail
2026-10-16T12:38:45.977Z ok 5 - security: limited tokens, invisible repositories, readers' labels and the audit trail
2026-10-16T12:38:45.977Z   ---
2026-10-16T12:38:45.977Z   duration_ms: 16243.940005
2026-10-16T12:38:45.977Z   type: 'test'
2026-10-16T12:38:45.977Z   ...
2026-10-16T12:38:46.105Z # Subtest: security: organization pictures are the owners' to change, and invitations aren't sent twice
2026-10-16T12:38:46.105Z ok 6 - security: organization pictures are the owners' to change, and invitations aren't sent twice
2026-10-16T12:38:46.105Z   ---
2026-10-16T12:38:46.105Z   duration_ms: 130.929111
2026-10-16T12:38:46.105Z   type: 'test'
2026-10-16T12:38:46.105Z   ...
2026-10-16T12:38:46.692Z # Subtest: security: organization members get the base permission, which only owners change
2026-10-16T12:38:46.692Z ok 7 - security: organization members get the base permission, which only owners change
2026-10-16T12:38:46.692Z   ---
2026-10-16T12:38:46.692Z   duration_ms: 587.194121
2026-10-16T12:38:46.692Z   type: 'test'
2026-10-16T12:38:46.692Z   ...
2026-10-16T12:38:47.542Z # Subtest: security: leaving an organization takes its repository access along
2026-10-16T12:38:47.542Z ok 8 - security: leaving an organization takes its repository access along
2026-10-16T12:38:47.542Z   ---
2026-10-16T12:38:47.542Z   duration_ms: 847.930233
2026-10-16T12:38:47.542Z   type: 'test'
2026-10-16T12:38:47.542Z   ...
2026-10-16T12:38:53.137Z # Subtest: security: organization settings are checked before anything is saved, and agents see the base permission
2026-10-16T12:38:53.138Z ok 9 - security: organization settings are checked before anything is saved, and agents see the base permission
2026-10-16T12:38:53.138Z   ---
2026-10-16T12:38:53.138Z   duration_ms: 5594.841368
2026-10-16T12:38:53.138Z   type: 'test'
2026-10-16T12:38:53.138Z   ...
2026-10-16T12:39:00.815Z # Subtest: security: a transferred repository keeps its data, and its old name redirects only for readers
2026-10-16T12:39:00.815Z ok 10 - security: a transferred repository keeps its data, and its old name redirects only for readers
2026-10-16T12:39:00.815Z   ---
2026-10-16T12:39:00.815Z   duration_ms: 7675.779212
2026-10-16T12:39:00.815Z   type: 'test'
2026-10-16T12:39:00.815Z   ...
2026-10-16T12:39:16.655Z # Subtest: security: agents land changes on protected branches only through auto-merge a person allowed, gated by CI
2026-10-16T12:39:16.655Z ok 11 - security: agents land changes on protected branches only through auto-merge a person allowed, gated by CI
2026-10-16T12:39:16.655Z   ---
2026-10-16T12:39:16.655Z   duration_ms: 15843.377224
2026-10-16T12:39:16.655Z   type: 'test'
2026-10-16T12:39:16.655Z   ...
2026-10-16T12:39:27.887Z # Subtest: security: an admin can let agents' auto-merges land on green checks without an approval, and nothing more
2026-10-16T12:39:27.887Z ok 12 - security: an admin can let agents' auto-merges land on green checks without an approval, and nothing more
2026-10-16T12:39:27.887Z   ---
2026-10-16T12:39:27.887Z   duration_ms: 11231.651653
2026-10-16T12:39:27.887Z   type: 'test'
2026-10-16T12:39:27.887Z   ...
2026-10-16T12:39:28.590Z # Subtest: security: an archived repository lands nothing by itself: archiving ends auto-merge and empties the merge queue
2026-10-16T12:39:28.590Z ok 13 - security: an archived repository lands nothing by itself: archiving ends auto-merge and empties the merge queue
2026-10-16T12:39:28.590Z   ---
2026-10-16T12:39:28.590Z   duration_ms: 702.495419
2026-10-16T12:39:28.590Z   type: 'test'
2026-10-16T12:39:28.590Z   ...
2026-10-16T12:39:29.887Z # Subtest: security: landing a pull request deletes its head branch only when asked, through auto-merge and the queue too, and never a protected one
2026-10-16T12:39:29.887Z ok 14 - security: landing a pull request deletes its head branch only when asked, through auto-merge and the queue too, and never a protected one
2026-10-16T12:39:29.887Z   ---
2026-10-16T12:39:29.887Z   duration_ms: 1298.411446
2026-10-16T12:39:29.887Z   type: 'test'
2026-10-16T12:39:29.887Z   ...
2026-10-16T12:39:30.803Z # Subtest: security: agents see what auto-merge needs next to the refusal to merge directly
2026-10-16T12:39:30.803Z ok 15 - security: agents see what auto-merge needs next to the refusal to merge directly
2026-10-16T12:39:30.803Z   ---
2026-10-16T12:39:30.803Z   duration_ms: 915.08298
2026-10-16T12:39:30.803Z   type: 'test'
2026-10-16T12:39:30.803Z   ...
2026-10-16T12:39:34.265Z # Subtest: security: the queue's bypass button does what it says, and a merge queue can't contradict linear history
2026-10-16T12:39:34.265Z ok 16 - security: the queue's bypass button does what it says, and a merge queue can't contradict linear history
2026-10-16T12:39:34.265Z   ---
2026-10-16T12:39:34.265Z   duration_ms: 3462.324191
2026-10-16T12:39:34.265Z   type: 'test'
2026-10-16T12:39:34.265Z   ...
2026-10-16T12:39:34.680Z # Subtest: security: no token can mint a token, an agent or a sandbox, through the API or the web forms
2026-10-16T12:39:34.680Z ok 17 - security: no token can mint a token, an agent or a sandbox, through the API or the web forms
2026-10-16T12:39:34.680Z   ---
2026-10-16T12:39:34.680Z   duration_ms: 415.014593
2026-10-16T12:39:34.680Z   type: 'test'
2026-10-16T12:39:34.680Z   ...
2026-10-16T12:39:41.691Z # Subtest: security: repository variable endpoints see only the repository's own, and organization variable deletes are checked
2026-10-16T12:39:41.691Z ok 18 - security: repository variable endpoints see only the repository's own, and organization variable deletes are checked
2026-10-16T12:39:41.691Z   ---
2026-10-16T12:39:41.691Z   duration_ms: 7009.928034
2026-10-16T12:39:41.691Z   type: 'test'
2026-10-16T12:39:41.691Z   ...
2026-10-16T12:39:42.026Z # Subtest: security: milestones are checked before an issue is saved, and lists filter by them
2026-10-16T12:39:42.027Z ok 19 - security: milestones are checked before an issue is saved, and lists filter by them
2026-10-16T12:39:42.027Z   ---
2026-10-16T12:39:42.027Z   duration_ms: 336.328686
2026-10-16T12:39:42.027Z   type: 'test'
2026-10-16T12:39:42.027Z   ...
2026-10-16T12:39:44.566Z # Subtest: security: push protection reads large files, and revoking a token through the API is on the record
2026-10-16T12:39:44.566Z ok 20 - security: push protection reads large files, and revoking a token through the API is on the record
2026-10-16T12:39:44.566Z   ---
2026-10-16T12:39:44.566Z   duration_ms: 2539.550605
2026-10-16T12:39:44.566Z   type: 'test'
2026-10-16T12:39:44.566Z   ...
2026-10-16T12:39:45.285Z # Subtest: security: git request bodies are bounded, compressed or not, before anything reads them
2026-10-16T12:39:45.285Z ok 21 - security: git request bodies are bounded, compressed or not, before anything reads them
2026-10-16T12:39:45.285Z   ---
2026-10-16T12:39:45.285Z   duration_ms: 718.373442
2026-10-16T12:39:45.285Z   type: 'test'
2026-10-16T12:39:45.285Z   ...
2026-10-16T12:39:45.762Z # Subtest: security: a file rewritten from scratch is diffed quickly, even for anonymous readers
2026-10-16T12:39:45.762Z ok 22 - security: a file rewritten from scratch is diffed quickly, even for anonymous readers
2026-10-16T12:39:45.762Z   ---
2026-10-16T12:39:45.762Z   duration_ms: 476.420076
2026-10-16T12:39:45.762Z   type: 'test'
2026-10-16T12:39:45.762Z   ...
2026-10-16T12:39:46.008Z # Subtest: security: signed out, a private repository and a missing one look the same everywhere
2026-10-16T12:39:46.008Z ok 23 - security: signed out, a private repository and a missing one look the same everywhere
2026-10-16T12:39:46.008Z   ---
2026-10-16T12:39:46.008Z   duration_ms: 246.81353
2026-10-16T12:39:46.008Z   type: 'test'
2026-10-16T12:39:46.009Z   ...
2026-10-16T12:39:46.738Z # Subtest: security: live updates say only that something changed, and never carry audit entries or payloads
2026-10-16T12:39:46.738Z ok 24 - security: live updates say only that something changed, and never carry audit entries or payloads
2026-10-16T12:39:46.738Z   ---
2026-10-16T12:39:46.738Z   duration_ms: 729.423402
2026-10-16T12:39:46.738Z   type: 'test'
2026-10-16T12:39:46.738Z   ...
2026-10-16T12:39:49.660Z # Subtest: security: push protection reads commit and tag messages, UTF-16 files and Diffinery's own tokens, and records opt-outs
2026-10-16T12:39:49.665Z ok 25 - security: push protection reads commit and tag messages, UTF-16 files and Diffinery's own tokens, and records opt-outs
2026-10-16T12:39:49.665Z   ---
2026-10-16T12:39:49.665Z   duration_ms: 2918.148737
2026-10-16T12:39:49.665Z   type: 'test'
2026-10-16T12:39:49.665Z   ...
2026-10-16T12:39:50.083Z # Subtest: security: required checks gate direct pushes to a protected branch, as on GitHub
2026-10-16T12:39:50.083Z ok 26 - security: required checks gate direct pushes to a protected branch, as on GitHub
2026-10-16T12:39:50.083Z   ---
2026-10-16T12:39:50.083Z   duration_ms: 427.015554
2026-10-16T12:39:50.083Z   type: 'test'
2026-10-16T12:39:50.083Z   ...
2026-10-16T12:39:50.343Z # Subtest: security: issue, pull request and comment text has GitHub's length limits
2026-10-16T12:39:50.344Z ok 27 - security: issue, pull request and comment text has GitHub's length limits
2026-10-16T12:39:50.344Z   ---
2026-10-16T12:39:50.344Z   duration_ms: 258.06829
2026-10-16T12:39:50.344Z   type: 'test'
2026-10-16T12:39:50.344Z   ...
2026-10-16T12:39:57.326Z # Subtest: security: deleting a repository deletes its stored objects too
2026-10-16T12:39:57.327Z ok 28 - security: deleting a repository deletes its stored objects too
2026-10-16T12:39:57.327Z   ---
2026-10-16T12:39:57.327Z   duration_ms: 6984.673824
2026-10-16T12:39:57.327Z   type: 'test'
2026-10-16T12:39:57.327Z   ...
2026-10-16T12:39:57.893Z # Subtest: security: pushes are checked like git's fsck: no '..' or '.git' entries, no unsafe .gitmodules
2026-10-16T12:39:57.893Z ok 29 - security: pushes are checked like git's fsck: no '..' or '.git' entries, no unsafe .gitmodules
2026-10-16T12:39:57.893Z   ---
2026-10-16T12:39:57.893Z   duration_ms: 566.052722
2026-10-16T12:39:57.893Z   type: 'test'
2026-10-16T12:39:57.893Z   ...
2026-10-16T12:39:58.514Z # Subtest: security: a job's runner gets only the secrets the job names
2026-10-16T12:39:58.514Z ok 30 - security: a job's runner gets only the secrets the job names
2026-10-16T12:39:58.514Z   ---
2026-10-16T12:39:58.514Z   duration_ms: 621.86494
2026-10-16T12:39:58.514Z   type: 'test'
2026-10-16T12:39:58.514Z   ...
2026-10-16T12:39:59.088Z # Subtest: security: runs of agent code get no repository secrets unless an admin allows it
2026-10-16T12:39:59.088Z ok 31 - security: runs of agent code get no repository secrets unless an admin allows it
2026-10-16T12:39:59.088Z   ---
2026-10-16T12:39:59.088Z   duration_ms: 573.652738
2026-10-16T12:39:59.088Z   type: 'test'
2026-10-16T12:39:59.088Z   ...
2026-10-16T12:39:59.508Z # Subtest: security: adding someone by email always invites them, so the address doesn't reveal their username and they agree first
2026-10-16T12:39:59.509Z ok 32 - security: adding someone by email always invites them, so the address doesn't reveal their username and they agree first
2026-10-16T12:39:59.509Z   ---
2026-10-16T12:39:59.509Z   duration_ms: 420.307219
2026-10-16T12:39:59.509Z   type: 'test'
2026-10-16T12:39:59.509Z   ...
2026-10-16T12:40:01.436Z # Subtest: security: a job's log is capped, and oversized workflow files aren't parsed
2026-10-16T12:40:01.436Z ok 33 - security: a job's log is capped, and oversized workflow files aren't parsed
2026-10-16T12:40:01.436Z   ---
2026-10-16T12:40:01.436Z   duration_ms: 1927.375773
2026-10-16T12:40:01.436Z   type: 'test'
2026-10-16T12:40:01.436Z   ...
2026-10-16T12:40:02.140Z # Subtest: security: a workflow's token can't use another repository's private packages, and a repository's name is its own
2026-10-16T12:40:02.140Z ok 34 - security: a workflow's token can't use another repository's private packages, and a repository's name is its own
2026-10-16T12:40:02.140Z   ---
2026-10-16T12:40:02.140Z   duration_ms: 703.12905
2026-10-16T12:40:02.140Z   type: 'test'
2026-10-16T12:40:02.140Z   ...
2026-10-16T12:40:02.997Z # Subtest: security: OIDC tokens name the environment a job deployed to, and carry ids that survive a reused name
2026-10-16T12:40:02.997Z ok 35 - security: OIDC tokens name the environment a job deployed to, and carry ids that survive a reused name
2026-10-16T12:40:02.997Z   ---
2026-10-16T12:40:02.997Z   duration_ms: 858.448292
2026-10-16T12:40:02.997Z   type: 'test'
2026-10-16T12:40:02.997Z   ...
2026-10-16T12:40:03.377Z # Subtest: security: sensitive actions need a recent sign-in, sessions end 90 days after it, and one browser can be signed out
2026-10-16T12:40:03.377Z ok 36 - security: sensitive actions need a recent sign-in, sessions end 90 days after it, and one browser can be signed out
2026-10-16T12:40:03.377Z   ---
2026-10-16T12:40:03.377Z   duration_ms: 379.486023
2026-10-16T12:40:03.377Z   type: 'test'
2026-10-16T12:40:03.377Z   ...
2026-10-16T12:40:04.357Z # Subtest: security: self-hosted runners register with a one-hour token and claim jobs with their own
2026-10-16T12:40:04.357Z ok 37 - security: self-hosted runners register with a one-hour token and claim jobs with their own
2026-10-16T12:40:04.357Z   ---
2026-10-16T12:40:04.357Z   duration_ms: 979.989045
2026-10-16T12:40:04.357Z   type: 'test'
2026-10-16T12:40:04.357Z   ...
2026-10-16T12:40:05.638Z # Subtest: security: an organization secret reaches only the repositories it's shared with
2026-10-16T12:40:05.638Z ok 38 - security: an organization secret reaches only the repositories it's shared with
2026-10-16T12:40:05.639Z   ---
2026-10-16T12:40:05.639Z   duration_ms: 1281.141032
2026-10-16T12:40:05.639Z   type: 'test'
2026-10-16T12:40:05.639Z   ...
2026-10-16T12:40:06.653Z # Subtest: security: an admin can purge objects a force-push left unreachable
2026-10-16T12:40:06.653Z ok 39 - security: an admin can purge objects a force-push left unreachable
2026-10-16T12:40:06.653Z   ---
2026-10-16T12:40:06.653Z   duration_ms: 1013.068183
2026-10-16T12:40:06.653Z   type: 'test'
2026-10-16T12:40:06.653Z   ...
2026-10-16T12:40:07.511Z # Subtest: security: webhooks reach only public hosts other than Diffinery, at most 20 per repository
2026-10-16T12:40:07.512Z ok 40 - security: webhooks reach only public hosts other than Diffinery, at most 20 per repository
2026-10-16T12:40:07.512Z   ---
2026-10-16T12:40:07.512Z   duration_ms: 858.130952
2026-10-16T12:40:07.512Z   type: 'test'
2026-10-16T12:40:07.512Z   ...
2026-10-16T12:40:09.702Z # Subtest: security: invitations and test emails have limits, so an account can't be used to send mail in bulk
2026-10-16T12:40:09.702Z ok 41 - security: invitations and test emails have limits, so an account can't be used to send mail in bulk
2026-10-16T12:40:09.702Z   ---
2026-10-16T12:40:09.702Z   duration_ms: 2191.845208
2026-10-16T12:40:09.702Z   type: 'test'
2026-10-16T12:40:09.702Z   ...
2026-10-16T12:40:10.024Z # Subtest: security: inputs that were taken on trust are checked (collaborators, check links, paging, MCP batches, reserved names)
2026-10-16T12:40:10.024Z ok 42 - security: inputs that were taken on trust are checked (collaborators, check links, paging, MCP batches, reserved names)
2026-10-16T12:40:10.024Z   ---
2026-10-16T12:40:10.024Z   duration_ms: 321.412454
2026-10-16T12:40:10.024Z   type: 'test'
2026-10-16T12:40:10.024Z   ...
2026-10-16T12:40:23.114Z # Subtest: security: environment reviewers hold a deploy job until a listed person approves, and nobody else can
2026-10-16T12:40:23.114Z ok 43 - security: environment reviewers hold a deploy job until a listed person approves, and nobody else can
2026-10-16T12:40:23.114Z   ---
2026-10-16T12:40:23.114Z   duration_ms: 13089.486877
2026-10-16T12:40:23.114Z   type: 'test'
2026-10-16T12:40:23.114Z   ...
2026-10-16T12:40:24.663Z # Subtest: security: adding someone by username sends an invitation, and they get access only once they accept
2026-10-16T12:40:24.663Z ok 44 - security: adding someone by username sends an invitation, and they get access only once they accept
2026-10-16T12:40:24.663Z   ---
2026-10-16T12:40:24.663Z   duration_ms: 1549.27721
2026-10-16T12:40:24.663Z   type: 'test'
2026-10-16T12:40:24.663Z   ...
2026-10-16T12:41:28.238Z # Subtest: security: per-account quotas on hosted minutes, hosted jobs at once, sandboxes and repositories
2026-10-16T12:41:28.238Z ok 45 - security: per-account quotas on hosted minutes, hosted jobs at once, sandboxes and repositories
2026-10-16T12:41:28.238Z   ---
2026-10-16T12:41:28.238Z   duration_ms: 63575.667029
2026-10-16T12:41:28.238Z   type: 'test'
2026-10-16T12:41:28.238Z   ...
2026-10-16T12:41:31.781Z # Subtest: security: a per-account storage quota refuses pushes, Git LFS and release asset uploads past it; reads and deletes keep working
2026-10-16T12:41:31.781Z ok 46 - security: a per-account storage quota refuses pushes, Git LFS and release asset uploads past it; reads and deletes keep working
2026-10-16T12:41:31.781Z   ---
2026-10-16T12:41:31.781Z   duration_ms: 3539.287207
2026-10-16T12:41:31.781Z   type: 'test'
2026-10-16T12:41:31.781Z   ...
2026-10-16T12:41:53.009Z # Subtest: security: kill switches suspend Actions for a repository or an account, and pause hosted compute on the instance
2026-10-16T12:41:53.009Z ok 47 - security: kill switches suspend Actions for a repository or an account, and pause hosted compute on the instance
2026-10-16T12:41:53.009Z   ---
2026-10-16T12:41:53.009Z   duration_ms: 21163.429388
2026-10-16T12:41:53.009Z   type: 'test'
2026-10-16T12:41:53.009Z   ...
2026-10-16T12:42:14.356Z # Subtest: status page: anyone can read it, and everything is operational at first
2026-10-16T12:42:14.357Z ok 48 - status page: anyone can read it, and everything is operational at first
2026-10-16T12:42:14.357Z   ---
2026-10-16T12:42:14.357Z   duration_ms: 21195.163456
2026-10-16T12:42:14.357Z   type: 'test'
2026-10-16T12:42:14.357Z   ...
2026-10-16T12:42:14.470Z # Subtest: status page: only site administrators can manage incidents (404 for anyone else)
2026-10-16T12:42:14.470Z ok 49 - status page: only site administrators can manage incidents (404 for anyone else)
2026-10-16T12:42:14.470Z   ---
2026-10-16T12:42:14.470Z   duration_ms: 113.169336
2026-10-16T12:42:14.470Z   type: 'test'
2026-10-16T12:42:14.470Z   ...
2026-10-16T12:42:14.576Z # Subtest: status page: a site administrator opens an incident through the API, and the page shows it
2026-10-16T12:42:14.576Z ok 50 - status page: a site administrator opens an incident through the API, and the page shows it
2026-10-16T12:42:14.576Z   ---
2026-10-16T12:42:14.576Z   duration_ms: 104.970669
2026-10-16T12:42:14.576Z   type: 'test'
2026-10-16T12:42:14.576Z   ...
2026-10-16T12:42:14.828Z # Subtest: status page: the web form opens an incident with several components and posts updates
2026-10-16T12:42:14.828Z ok 51 - status page: the web form opens an incident with several components and posts updates
2026-10-16T12:42:14.828Z   ---
2026-10-16T12:42:14.828Z   duration_ms: 253.683196
2026-10-16T12:42:14.828Z   type: 'test'
2026-10-16T12:42:14.828Z   ...
2026-10-16T12:42:14.910Z # Subtest: status page: resolving through the API returns the component to operational and moves the incident to past incidents
2026-10-16T12:42:14.910Z ok 52 - status page: resolving through the API returns the component to operational and moves the incident to past incidents
2026-10-16T12:42:14.910Z   ---
2026-10-16T12:42:14.910Z   duration_ms: 80.436439
2026-10-16T12:42:14.910Z   type: 'test'
2026-10-16T12:42:14.910Z   ...
2026-10-16T12:42:14.936Z # Subtest: status page: changes are audited without the updates' text
2026-10-16T12:42:14.936Z ok 53 - status page: changes are audited without the updates' text
2026-10-16T12:42:14.936Z   ---
2026-10-16T12:42:14.936Z   duration_ms: 27.216324
2026-10-16T12:42:14.936Z   type: 'test'
2026-10-16T12:42:14.936Z   ...
2026-10-16T12:42:15.041Z # Subtest: status page: pausing hosted compute shows Actions and agent sandboxes under maintenance
2026-10-16T12:42:15.041Z ok 54 - status page: pausing hosted compute shows Actions and agent sandboxes under maintenance
2026-10-16T12:42:15.041Z   ---
2026-10-16T12:42:15.041Z   duration_ms: 99.843146
2026-10-16T12:42:15.041Z   type: 'test'
2026-10-16T12:42:15.041Z   ...
2026-10-16T12:42:15.149Z 1..54
2026-10-16T12:42:15.149Z # tests 54
2026-10-16T12:42:15.149Z # suites 0
2026-10-16T12:42:15.149Z # pass 54
2026-10-16T12:42:15.149Z # fail 0
2026-10-16T12:42:15.149Z # cancelled 0
2026-10-16T12:42:15.149Z # skipped 0
2026-10-16T12:42:15.149Z # todo 0
2026-10-16T12:42:15.149Z # duration_ms 257900.12664
2026-10-16T12:42:15.268Z Cache hit occurred on the primary key node-cache-Linux-x64-pnpm-4b94436b86798d88b931ea24b5b847697aebf45520d6ef384cb382ce6c1f1e08, not saving cache.
2026-10-16T12:42:15.703Z Pruning is unnecessary.
2026-10-16T12:42:16.270Z Removing persisted credentials
2026-10-16T12:42:16.321Z Job completed with conclusion: success