2026-10-16T14:12:41.983Z Diffinery runner: job e2e (End-to-end (security)) for codician/diffinery@26d9056f85fd 2026-10-16T14:12:42.015Z Runner: image diffinery-runner:aeeb9e24ddf78dd4d8e258a7, in lhr09, WEUR, container b977f71e875117f37c75e1dd01024ee63ea36820d2c5785025ead4a0aa08f21a 2026-10-16T14:12:42.015Z Runner size: large (4 vCPU, 12 GiB of memory, 20 GB of disk), an earlier run of this job wasn't measured; runs-on: diffinery-large (or -medium, -small, -tiny) sets a size 2026-10-16T14:12:42.015Z Workspace: /workspace/diffinery 2026-10-16T14:12:42.082Z ##[group]Run actions/checkout@v4 2026-10-16T14:12:42.082Z ##[endgroup] 2026-10-16T14:12:42.086Z Syncing repository: codician/diffinery 2026-10-16T14:12:42.292Z Fetching the repository (depth 1) 2026-10-16T14:12:43.505Z remote: Enumerating objects: 617, done. 2026-10-16T14:12:43.755Z Receiving objects: 0% (1/617) Receiving objects: 1% (7/617) Receiving objects: 2% (13/617) Receiving objects: 3% (19/617) Receiving objects: 4% (25/617) Receiving objects: 5% (31/617) Receiving objects: 6% (38/617) Receiving objects: 7% (44/617) Receiving objects: 8% (50/617) Receiving objects: 9% (56/617) Receiving objects: 10% (62/617) Receiving objects: 11% (68/617) Receiving objects: 12% (75/617) Receiving objects: 13% (81/617) Receiving objects: 14% (87/617) Receiving objects: 15% (93/617) Receiving objects: 16% (99/617) Receiving objects: 17% (105/617) Receiving objects: 18% (112/617) Receiving objects: 19% (118/617) Receiving objects: 20% (124/617) Receiving objects: 21% (130/617) Receiving objects: 22% (136/617) Receiving objects: 23% (142/617) Receiving objects: 24% (149/617) Receiving objects: 25% (155/617) Receiving objects: 26% (161/617) Receiving objects: 27% (167/617) Receiving objects: 28% (173/617) Receiving objects: 29% (179/617) Receiving objects: 30% (186/617) Receiving objects: 31% (192/617) Receiving objects: 32% (198/617) Receiving objects: 33% (204/617) Receiving objects: 34% (210/617) Receiving objects: 35% (216/617) Receiving objects: 36% (223/617) Receiving objects: 37% (229/617) Receiving objects: 38% (235/617) Receiving objects: 39% (241/617) Receiving objects: 40% (247/617) Receiving objects: 41% (253/617) Receiving objects: 42% (260/617) Receiving objects: 43% (266/617) Receiving objects: 44% (272/617) Receiving objects: 45% (278/617) Receiving objects: 46% (284/617) Receiving objects: 47% (290/617) Receiving objects: 48% (297/617) Receiving objects: 49% (303/617) Receiving objects: 50% (309/617) Receiving objects: 51% (315/617) Receiving objects: 52% (321/617) Receiving objects: 53% (328/617) Receiving objects: 54% (334/617) Receiving objects: 55% (340/617) Receiving objects: 56% (346/617) Receiving objects: 57% (352/617) Receiving objects: 58% (358/617) Receiving objects: 59% (365/617) Receiving objects: 60% (371/617) Receiving objects: 61% (377/617) Receiving objects: 62% (383/617) Receiving objects: 63% (389/617) Receiving objects: 64% (395/617) Receiving objects: 65% (402/617) Receiving objects: 66% (408/617) Receiving objects: 67% (414/617) Receiving objects: 68% (420/617) Receiving objects: 69% (426/617) Receiving objects: 70% (432/617) Receiving objects: 71% (439/617) Receiving objects: 72% (445/617) Receiving objects: 73% (451/617) Receiving objects: 74% (457/617) Receiving objects: 75% (463/617) Receiving objects: 76% (469/617) Receiving objects: 77% (476/617) Receiving objects: 78% (482/617) Receiving objects: 79% (488/617) Receiving objects: 80% (494/617) Receiving objects: 81% (500/617) Receiving objects: 82% (506/617) Receiving objects: 83% (513/617) Receiving objects: 84% (519/617) Receiving objects: 85% (525/617) Receiving objects: 86% (531/617) Receiving objects: 87% (537/617) Receiving objects: 88% (543/617) Receiving objects: 89% (550/617) Receiving objects: 90% (556/617) Receiving objects: 91% (562/617) Receiving objects: 92% (568/617) Receiving objects: 93% (574/617) Receiving objects: 94% (580/617) Receiving objects: 95% (587/617) Receiving objects: 96% (593/617) remote: Total 617 (delta 0), reused 617 (delta 0) 2026-10-16T14:12:43.756Z Receiving objects: 97% (599/617) Receiving objects: 98% (605/617) Receiving objects: 99% (611/617) Receiving objects: 100% (617/617) Receiving objects: 100% (617/617), 2.51 MiB | 10.25 MiB/s, done. 2026-10-16T14:12:43.798Z From https://diffinery.com/codician/diffinery 2026-10-16T14:12:43.798Z * [new ref] 26d9056f85fdc94d88fe608e24bf1e775fc56e44 -> origin/diffinery-checkout 2026-10-16T14:12:43.930Z Note: switching to '26d9056f85fdc94d88fe608e24bf1e775fc56e44'. 2026-10-16T14:12:43.930Z 2026-10-16T14:12:43.930Z You are in 'detached HEAD' state. You can look around, make experimental 2026-10-16T14:12:43.930Z changes and commit them, and you can discard any commits you make in this 2026-10-16T14:12:43.930Z state without impacting any branches by switching back to a branch. 2026-10-16T14:12:43.930Z 2026-10-16T14:12:43.930Z If you want to create a new branch to retain commits you create, you may 2026-10-16T14:12:43.930Z do so (now or later) by using -c with the switch command. Example: 2026-10-16T14:12:43.930Z 2026-10-16T14:12:43.930Z git switch -c 2026-10-16T14:12:43.930Z 2026-10-16T14:12:43.930Z Or undo this operation with: 2026-10-16T14:12:43.930Z 2026-10-16T14:12:43.930Z git switch - 2026-10-16T14:12:43.930Z 2026-10-16T14:12:43.930Z Turn off this advice by setting config variable advice.detachedHead to false 2026-10-16T14:12:43.930Z 2026-10-16T14:12:43.930Z HEAD is now at 26d9056 Merge 7fc8cdb8efa69b741fe742f7c1ef0ec0779a74f7 into e14fcb18a6790fc06cf8119ce8e7487ec6a0faa8 2026-10-16T14:12:43.944Z HEAD is now at 26d9056f85fdc94d88fe608e24bf1e775fc56e44 2026-10-16T14:12:44.116Z Download action repository 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1' 2026-10-16T14:12:44.942Z ##[group]Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 2026-10-16T14:12:44.942Z with: 2026-10-16T14:12:44.942Z dest: ~/setup-pnpm 2026-10-16T14:12:44.942Z run_install: null 2026-10-16T14:12:44.942Z cache: false 2026-10-16T14:12:44.942Z cache_dependency_path: pnpm-lock.yaml 2026-10-16T14:12:44.942Z package_json_file: package.json 2026-10-16T14:12:44.942Z standalone: false 2026-10-16T14:12:44.942Z ##[endgroup] 2026-10-16T14:12:45.390Z ##[group]Running self-installer... 2026-10-16T14:12:47.183Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-16T14:12:47.205Z Packages: +1 2026-10-16T14:12:47.205Z + 2026-10-16T14:12:48.186Z Progress: resolved 1, reused 0, downloaded 1, added 0 2026-10-16T14:12:48.274Z Progress: resolved 1, reused 0, downloaded 1, added 1, done 2026-10-16T14:12:48.334Z 2026-10-16T14:12:48.334Z dependencies: 2026-10-16T14:12:48.334Z + pnpm 10.28.0 (12.14.0 is available) 2026-10-16T14:12:48.334Z 2026-10-16T14:12:48.341Z Done in 2.4s 2026-10-16T14:12:48.379Z ##[endgroup] 2026-10-16T14:12:48.380Z Installation Completed! 2026-10-16T14:12:48.578Z ##[group]Run actions/setup-node@v4 2026-10-16T14:12:48.578Z with: 2026-10-16T14:12:48.578Z node-version: 22 2026-10-16T14:12:48.578Z cache: pnpm 2026-10-16T14:12:48.578Z ##[endgroup] 2026-10-16T14:12:48.591Z Found in cache @ 22.22.0 (pre-installed node satisfies '22') 2026-10-16T14:12:58.872Z Cache Size: ~216 MB (226515969 B) 2026-10-16T14:13:08.925Z Cache restored from key: node-cache-Linux-x64-pnpm-aa519d0d5d7e5a224fb440987e5331e1cb7b3a95e67805db372d6def9572f2b0 2026-10-16T14:13:09.159Z ##[group]Run pnpm install --frozen-lockfile 2026-10-16T14:13:09.159Z ##[endgroup] 2026-10-16T14:13:10.334Z Scope: all 7 workspace projects 2026-10-16T14:13:10.487Z Lockfile is up to date, resolution step is skipped 2026-10-16T14:13:10.591Z Progress: resolved 1, reused 0, downloaded 0, added 0 2026-10-16T14:13:10.677Z Packages: +249 2026-10-16T14:13:10.677Z ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2026-10-16T14:13:11.594Z Progress: resolved 249, reused 224, downloaded 0, added 0 2026-10-16T14:13:12.600Z Progress: resolved 249, reused 243, downloaded 0, added 225 2026-10-16T14:13:13.345Z Progress: resolved 249, reused 243, downloaded 0, added 249, done 2026-10-16T14:13:32.815Z 2026-10-16T14:13:32.817Z devDependencies: 2026-10-16T14:13:32.817Z + turbo 2.11.7 2026-10-16T14:13:32.817Z + typescript 5.9.3 2026-10-16T14:13:32.817Z 2026-10-16T14:13:33.597Z Done in 24.2s using pnpm v10.28.0 2026-10-16T14:13:33.900Z ##[group]Run pnpm -r --if-present build 2026-10-16T14:13:33.900Z ##[endgroup] 2026-10-16T14:13:34.622Z Scope: 6 of 7 workspace projects 2026-10-16T14:13:34.631Z apps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env node 2026-10-16T14:13:34.631Z import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-16T14:13:34.632Z apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjs 2026-10-16T14:13:34.633Z containers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);" 2026-10-16T14:13:34.781Z apps/cli build: dist/diffinery.mjs 441.4kb 2026-10-16T14:13:34.790Z apps/cli build: ⚡ Done in 103ms 2026-10-16T14:13:34.802Z apps/cli build: Done 2026-10-16T14:13:34.858Z containers/runner build: dist/agent.mjs 666.9kb 2026-10-16T14:13:34.858Z containers/runner build: ⚡ Done in 179ms 2026-10-16T14:13:34.870Z containers/runner build: Done 2026-10-16T14:13:37.385Z apps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KB 2026-10-16T14:13:38.241Z apps/diffinery build: docs: 64 pages (+2 generated at runtime), CLI 0.1.0 (232 KiB) 2026-10-16T14:13:38.269Z apps/diffinery build: Done 2026-10-16T14:13:38.561Z ##[group]Run # Shards of similar length; a new test file runs in "rest" unless it's added to another. 2026-10-16T14:13:38.561Z core='/e2e\.test\.mjs$' 2026-10-16T14:13:38.561Z agents='/(agentic|review|tasks)\.test\.mjs$' 2026-10-16T14:13:38.561Z security='/(security|status)\.test\.mjs$' 2026-10-16T14:13:38.561Z # The core file's real histories and large pushes take minutes each (jquery's alone 2 to 3 on 2026-10-16T14:13:38.561Z # Diffinery's runners): two shards of their own, so no part of the file runs into node's 2026-10-16T14:13:38.561Z # per-file timeout, which is the --test-timeout here. 2026-10-16T14:13:38.561Z histories='^real histories:' 2026-10-16T14:13:38.561Z large='^(large files|large pushes):' 2026-10-16T14:13:38.561Z opts=(--test-timeout=600000) 2026-10-16T14:13:38.561Z case "security" in 2026-10-16T14:13:38.561Z core) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-skip-pattern="$histories" --test-skip-pattern="$large") ;; 2026-10-16T14:13:38.561Z histories) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts=(--test-timeout=900000 --test-name-pattern="$histories") ;; 2026-10-16T14:13:38.561Z large) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-name-pattern="$large") ;; 2026-10-16T14:13:38.561Z agents) files=$(ls test/e2e/*.test.mjs | grep -E "$agents") ;; 2026-10-16T14:13:38.561Z security) files=$(ls test/e2e/*.test.mjs | grep -E "$security") ;; 2026-10-16T14:13:38.561Z *) files=$(ls test/e2e/*.test.mjs | grep -vE "$core|$agents|$security") ;; 2026-10-16T14:13:38.561Z esac 2026-10-16T14:13:38.561Z echo "$files" 2026-10-16T14:13:38.561Z node --test --test-concurrency=1 "${opts[@]}" $files 2026-10-16T14:13:38.561Z ##[endgroup] 2026-10-16T14:13:38.592Z test/e2e/security.test.mjs 2026-10-16T14:13:38.592Z test/e2e/status.test.mjs 2026-10-16T14:13:38.681Z TAP version 13 2026-10-16T14:14:54.315Z # Subtest: security: search, required checks, environments, reviews, locks, archives, drafts and tree names 2026-10-16T14:14:54.315Z ok 1 - security: search, required checks, environments, reviews, locks, archives, drafts and tree names 2026-10-16T14:14:54.315Z --- 2026-10-16T14:14:54.315Z duration_ms: 75502.80122 2026-10-16T14:14:54.315Z type: 'test' 2026-10-16T14:14:54.315Z ... 2026-10-16T14:14:54.628Z # Subtest: security: organization admins can't hand out ownership 2026-10-16T14:14:54.628Z ok 2 - security: organization admins can't hand out ownership 2026-10-16T14:14:54.628Z --- 2026-10-16T14:14:54.628Z duration_ms: 315.77488 2026-10-16T14:14:54.628Z type: 'test' 2026-10-16T14:14:54.628Z ... 2026-10-16T14:14:59.490Z # Subtest: security: anonymous writes, token scopes, agent secrets, merge rules and drafts 2026-10-16T14:14:59.490Z ok 3 - security: anonymous writes, token scopes, agent secrets, merge rules and drafts 2026-10-16T14:14:59.491Z --- 2026-10-16T14:14:59.491Z duration_ms: 4859.8806 2026-10-16T14:14:59.491Z type: 'test' 2026-10-16T14:14:59.491Z ... 2026-10-16T14:15:01.895Z # Subtest: security: push protection covers commits made without git 2026-10-16T14:15:01.896Z ok 4 - security: push protection covers commits made without git 2026-10-16T14:15:01.896Z --- 2026-10-16T14:15:01.897Z duration_ms: 2406.85309 2026-10-16T14:15:01.897Z type: 'test' 2026-10-16T14:15:01.897Z ... 2026-10-16T14:15:43.226Z # Subtest: security: limited tokens, invisible repositories, readers' labels and the audit trail 2026-10-16T14:15:43.226Z ok 5 - security: limited tokens, invisible repositories, readers' labels and the audit trail 2026-10-16T14:15:43.227Z --- 2026-10-16T14:15:43.227Z duration_ms: 41328.83359 2026-10-16T14:15:43.227Z type: 'test' 2026-10-16T14:15:43.227Z ... 2026-10-16T14:15:43.646Z # Subtest: security: organization pictures are the owners' to change, and invitations aren't sent twice 2026-10-16T14:15:43.648Z ok 6 - security: organization pictures are the owners' to change, and invitations aren't sent twice 2026-10-16T14:15:43.648Z --- 2026-10-16T14:15:43.648Z duration_ms: 412.29668 2026-10-16T14:15:43.648Z type: 'test' 2026-10-16T14:15:43.648Z ... 2026-10-16T14:15:45.180Z # Subtest: security: organization members get the base permission, which only owners change 2026-10-16T14:15:45.181Z ok 7 - security: organization members get the base permission, which only owners change 2026-10-16T14:15:45.181Z --- 2026-10-16T14:15:45.181Z duration_ms: 1543.94335 2026-10-16T14:15:45.181Z type: 'test' 2026-10-16T14:15:45.181Z ... 2026-10-16T14:15:47.401Z # Subtest: security: leaving an organization takes its repository access along 2026-10-16T14:15:47.402Z ok 8 - security: leaving an organization takes its repository access along 2026-10-16T14:15:47.402Z --- 2026-10-16T14:15:47.402Z duration_ms: 2217.95436 2026-10-16T14:15:47.402Z type: 'test' 2026-10-16T14:15:47.402Z ... 2026-10-16T14:16:00.719Z # Subtest: security: organization settings are checked before anything is saved, and agents see the base permission 2026-10-16T14:16:00.720Z ok 9 - security: organization settings are checked before anything is saved, and agents see the base permission 2026-10-16T14:16:00.720Z --- 2026-10-16T14:16:00.720Z duration_ms: 13318.52248 2026-10-16T14:16:00.720Z type: 'test' 2026-10-16T14:16:00.720Z ... 2026-10-16T14:16:19.219Z # Subtest: security: a transferred repository keeps its data, and its old name redirects only for readers 2026-10-16T14:16:19.219Z ok 10 - security: a transferred repository keeps its data, and its old name redirects only for readers 2026-10-16T14:16:19.219Z --- 2026-10-16T14:16:19.219Z duration_ms: 18500.3762 2026-10-16T14:16:19.219Z type: 'test' 2026-10-16T14:16:19.219Z ... 2026-10-16T14:16:51.639Z # Subtest: security: agents land changes on protected branches only through auto-merge a person allowed, gated by CI 2026-10-16T14:16:51.640Z ok 11 - security: agents land changes on protected branches only through auto-merge a person allowed, gated by CI 2026-10-16T14:16:51.640Z --- 2026-10-16T14:16:51.640Z duration_ms: 32420.3218 2026-10-16T14:16:51.640Z type: 'test' 2026-10-16T14:16:51.640Z ... 2026-10-16T14:17:08.459Z # Subtest: security: an admin can let agents' auto-merges land on green checks without an approval, and nothing more 2026-10-16T14:17:08.460Z ok 12 - security: an admin can let agents' auto-merges land on green checks without an approval, and nothing more 2026-10-16T14:17:08.460Z --- 2026-10-16T14:17:08.460Z duration_ms: 16821.41109 2026-10-16T14:17:08.460Z type: 'test' 2026-10-16T14:17:08.460Z ... 2026-10-16T14:17:10.688Z # Subtest: security: an archived repository lands nothing by itself: archiving ends auto-merge and empties the merge queue 2026-10-16T14:17:10.688Z ok 13 - security: an archived repository lands nothing by itself: archiving ends auto-merge and empties the merge queue 2026-10-16T14:17:10.688Z --- 2026-10-16T14:17:10.688Z duration_ms: 2227.69799 2026-10-16T14:17:10.688Z type: 'test' 2026-10-16T14:17:10.688Z ... 2026-10-16T14:17:13.203Z # Subtest: security: landing a pull request deletes its head branch only when asked, through auto-merge and the queue too, and never a protected one 2026-10-16T14:17:13.203Z ok 14 - security: landing a pull request deletes its head branch only when asked, through auto-merge and the queue too, and never a protected one 2026-10-16T14:17:13.203Z --- 2026-10-16T14:17:13.203Z duration_ms: 2512.78289 2026-10-16T14:17:13.203Z type: 'test' 2026-10-16T14:17:13.203Z ... 2026-10-16T14:17:14.438Z # Subtest: security: agents see what auto-merge needs next to the refusal to merge directly 2026-10-16T14:17:14.438Z ok 15 - security: agents see what auto-merge needs next to the refusal to merge directly 2026-10-16T14:17:14.438Z --- 2026-10-16T14:17:14.438Z duration_ms: 1235.66879 2026-10-16T14:17:14.438Z type: 'test' 2026-10-16T14:17:14.438Z ... 2026-10-16T14:17:20.690Z # Subtest: security: the queue's bypass button does what it says, and a merge queue can't contradict linear history 2026-10-16T14:17:20.690Z ok 16 - security: the queue's bypass button does what it says, and a merge queue can't contradict linear history 2026-10-16T14:17:20.690Z --- 2026-10-16T14:17:20.690Z duration_ms: 6253.16046 2026-10-16T14:17:20.690Z type: 'test' 2026-10-16T14:17:20.690Z ... 2026-10-16T14:17:21.709Z # Subtest: security: no token can mint a token, an agent or a sandbox, through the API or the web forms 2026-10-16T14:17:21.711Z ok 17 - security: no token can mint a token, an agent or a sandbox, through the API or the web forms 2026-10-16T14:17:21.711Z --- 2026-10-16T14:17:21.711Z duration_ms: 1017.73936 2026-10-16T14:17:21.711Z type: 'test' 2026-10-16T14:17:21.711Z ... 2026-10-16T14:17:35.746Z # Subtest: security: repository variable endpoints see only the repository's own, and organization variable deletes are checked 2026-10-16T14:17:35.747Z ok 18 - security: repository variable endpoints see only the repository's own, and organization variable deletes are checked 2026-10-16T14:17:35.747Z --- 2026-10-16T14:17:35.747Z duration_ms: 14020.97041 2026-10-16T14:17:35.747Z type: 'test' 2026-10-16T14:17:35.747Z ... 2026-10-16T14:17:36.378Z # Subtest: security: milestones are checked before an issue is saved, and lists filter by them 2026-10-16T14:17:36.379Z ok 19 - security: milestones are checked before an issue is saved, and lists filter by them 2026-10-16T14:17:36.379Z --- 2026-10-16T14:17:36.379Z duration_ms: 648.88689 2026-10-16T14:17:36.379Z type: 'test' 2026-10-16T14:17:36.379Z ... 2026-10-16T14:17:41.651Z # Subtest: security: push protection reads large files, and revoking a token through the API is on the record 2026-10-16T14:17:41.651Z ok 20 - security: push protection reads large files, and revoking a token through the API is on the record 2026-10-16T14:17:41.651Z --- 2026-10-16T14:17:41.651Z duration_ms: 5267.52442 2026-10-16T14:17:41.651Z type: 'test' 2026-10-16T14:17:41.651Z ... 2026-10-16T14:17:43.368Z # Subtest: security: git request bodies are bounded, compressed or not, before anything reads them 2026-10-16T14:17:43.369Z ok 21 - security: git request bodies are bounded, compressed or not, before anything reads them 2026-10-16T14:17:43.369Z --- 2026-10-16T14:17:43.369Z duration_ms: 1717.62237 2026-10-16T14:17:43.369Z type: 'test' 2026-10-16T14:17:43.369Z ... 2026-10-16T14:17:44.546Z # Subtest: security: a file rewritten from scratch is diffed quickly, even for anonymous readers 2026-10-16T14:17:44.547Z ok 22 - security: a file rewritten from scratch is diffed quickly, even for anonymous readers 2026-10-16T14:17:44.548Z --- 2026-10-16T14:17:44.548Z duration_ms: 1177.13246 2026-10-16T14:17:44.548Z type: 'test' 2026-10-16T14:17:44.548Z ... 2026-10-16T14:17:45.270Z # Subtest: security: signed out, a private repository and a missing one look the same everywhere 2026-10-16T14:17:45.271Z ok 23 - security: signed out, a private repository and a missing one look the same everywhere 2026-10-16T14:17:45.271Z --- 2026-10-16T14:17:45.271Z duration_ms: 728.20352 2026-10-16T14:17:45.271Z type: 'test' 2026-10-16T14:17:45.271Z ... 2026-10-16T14:17:46.125Z # Subtest: security: live updates say only that something changed, and never carry audit entries or payloads 2026-10-16T14:17:46.125Z ok 24 - security: live updates say only that something changed, and never carry audit entries or payloads 2026-10-16T14:17:46.125Z --- 2026-10-16T14:17:46.125Z duration_ms: 854.08052 2026-10-16T14:17:46.125Z type: 'test' 2026-10-16T14:17:46.125Z ... 2026-10-16T14:17:50.702Z # Subtest: security: push protection reads commit and tag messages, UTF-16 files and Diffinery's own tokens, and records opt-outs 2026-10-16T14:17:50.702Z ok 25 - security: push protection reads commit and tag messages, UTF-16 files and Diffinery's own tokens, and records opt-outs 2026-10-16T14:17:50.702Z --- 2026-10-16T14:17:50.702Z duration_ms: 4576.459 2026-10-16T14:17:50.702Z type: 'test' 2026-10-16T14:17:50.702Z ... 2026-10-16T14:17:51.911Z # Subtest: security: required checks gate direct pushes to a protected branch, as on GitHub 2026-10-16T14:17:51.911Z ok 26 - security: required checks gate direct pushes to a protected branch, as on GitHub 2026-10-16T14:17:51.911Z --- 2026-10-16T14:17:51.911Z duration_ms: 1204.28581 2026-10-16T14:17:51.911Z type: 'test' 2026-10-16T14:17:51.911Z ... 2026-10-16T14:17:52.728Z # Subtest: security: issue, pull request and comment text has GitHub's length limits 2026-10-16T14:17:52.729Z ok 27 - security: issue, pull request and comment text has GitHub's length limits 2026-10-16T14:17:52.729Z --- 2026-10-16T14:17:52.729Z duration_ms: 821.56589 2026-10-16T14:17:52.729Z type: 'test' 2026-10-16T14:17:52.729Z ... 2026-10-16T14:18:05.353Z # Subtest: security: deleting a repository deletes its stored objects too 2026-10-16T14:18:05.353Z ok 28 - security: deleting a repository deletes its stored objects too 2026-10-16T14:18:05.353Z --- 2026-10-16T14:18:05.353Z duration_ms: 12625.3071 2026-10-16T14:18:05.353Z type: 'test' 2026-10-16T14:18:05.353Z ... 2026-10-16T14:18:06.522Z # Subtest: security: pushes are checked like git's fsck: no '..' or '.git' entries, no unsafe .gitmodules 2026-10-16T14:18:06.522Z ok 29 - security: pushes are checked like git's fsck: no '..' or '.git' entries, no unsafe .gitmodules 2026-10-16T14:18:06.522Z --- 2026-10-16T14:18:06.522Z duration_ms: 1167.31441 2026-10-16T14:18:06.522Z type: 'test' 2026-10-16T14:18:06.522Z ... 2026-10-16T14:18:07.856Z # Subtest: security: a job's runner gets only the secrets the job names 2026-10-16T14:18:07.856Z ok 30 - security: a job's runner gets only the secrets the job names 2026-10-16T14:18:07.856Z --- 2026-10-16T14:18:07.856Z duration_ms: 1335.66431 2026-10-16T14:18:07.856Z type: 'test' 2026-10-16T14:18:07.856Z ... 2026-10-16T14:18:09.750Z # Subtest: security: runs of agent code get no repository secrets unless an admin allows it 2026-10-16T14:18:09.750Z ok 31 - security: runs of agent code get no repository secrets unless an admin allows it 2026-10-16T14:18:09.750Z --- 2026-10-16T14:18:09.750Z duration_ms: 1892.97252 2026-10-16T14:18:09.750Z type: 'test' 2026-10-16T14:18:09.750Z ... 2026-10-16T14:18:11.937Z # Subtest: security: an agent's commits stay agent code when a person pushes on top, until a person merges them 2026-10-16T14:18:11.937Z ok 32 - security: an agent's commits stay agent code when a person pushes on top, until a person merges them 2026-10-16T14:18:11.937Z --- 2026-10-16T14:18:11.937Z duration_ms: 2184.98838 2026-10-16T14:18:11.937Z type: 'test' 2026-10-16T14:18:11.937Z ... 2026-10-16T14:18:15.413Z # Subtest: security: a workflow on another branch can't cancel a protected branch's run by naming its concurrency group 2026-10-16T14:18:15.413Z ok 33 - security: a workflow on another branch can't cancel a protected branch's run by naming its concurrency group 2026-10-16T14:18:15.413Z --- 2026-10-16T14:18:15.413Z duration_ms: 3476.78181 2026-10-16T14:18:15.413Z type: 'test' 2026-10-16T14:18:15.413Z ... 2026-10-16T14:18:16.491Z # Subtest: security: adding someone by email always invites them, so the address doesn't reveal their username and they agree first 2026-10-16T14:18:16.491Z ok 34 - security: adding someone by email always invites them, so the address doesn't reveal their username and they agree first 2026-10-16T14:18:16.491Z --- 2026-10-16T14:18:16.492Z duration_ms: 1077.58923 2026-10-16T14:18:16.492Z type: 'test' 2026-10-16T14:18:16.492Z ... 2026-10-16T14:18:19.651Z # Subtest: security: a job's log is capped, and oversized workflow files aren't parsed 2026-10-16T14:18:19.651Z ok 35 - security: a job's log is capped, and oversized workflow files aren't parsed 2026-10-16T14:18:19.651Z --- 2026-10-16T14:18:19.651Z duration_ms: 3162.33009 2026-10-16T14:18:19.651Z type: 'test' 2026-10-16T14:18:19.651Z ... 2026-10-16T14:18:20.782Z # Subtest: security: a workflow's token can't use another repository's private packages, and a repository's name is its own 2026-10-16T14:18:20.782Z ok 36 - security: a workflow's token can't use another repository's private packages, and a repository's name is its own 2026-10-16T14:18:20.783Z --- 2026-10-16T14:18:20.783Z duration_ms: 1130.05454 2026-10-16T14:18:20.783Z type: 'test' 2026-10-16T14:18:20.783Z ... 2026-10-16T14:18:21.883Z # Subtest: security: OIDC tokens name the environment a job deployed to, and carry ids that survive a reused name 2026-10-16T14:18:21.883Z ok 37 - security: OIDC tokens name the environment a job deployed to, and carry ids that survive a reused name 2026-10-16T14:18:21.883Z --- 2026-10-16T14:18:21.883Z duration_ms: 1100.2759 2026-10-16T14:18:21.883Z type: 'test' 2026-10-16T14:18:21.883Z ... 2026-10-16T14:18:23.025Z # Subtest: security: sensitive actions need a recent sign-in, sessions end 90 days after it, and one browser can be signed out 2026-10-16T14:18:23.025Z ok 38 - security: sensitive actions need a recent sign-in, sessions end 90 days after it, and one browser can be signed out 2026-10-16T14:18:23.025Z --- 2026-10-16T14:18:23.025Z duration_ms: 1141.71563 2026-10-16T14:18:23.025Z type: 'test' 2026-10-16T14:18:23.025Z ... 2026-10-16T14:18:25.157Z # Subtest: security: self-hosted runners register with a one-hour token and claim jobs with their own 2026-10-16T14:18:25.157Z ok 39 - security: self-hosted runners register with a one-hour token and claim jobs with their own 2026-10-16T14:18:25.157Z --- 2026-10-16T14:18:25.157Z duration_ms: 2132.10712 2026-10-16T14:18:25.157Z type: 'test' 2026-10-16T14:18:25.157Z ... 2026-10-16T14:18:28.316Z # Subtest: security: an organization secret reaches only the repositories it's shared with 2026-10-16T14:18:28.317Z ok 40 - security: an organization secret reaches only the repositories it's shared with 2026-10-16T14:18:28.317Z --- 2026-10-16T14:18:28.317Z duration_ms: 3158.33105 2026-10-16T14:18:28.317Z type: 'test' 2026-10-16T14:18:28.317Z ... 2026-10-16T14:18:30.214Z # Subtest: security: an admin can purge objects a force-push left unreachable 2026-10-16T14:18:30.214Z ok 41 - security: an admin can purge objects a force-push left unreachable 2026-10-16T14:18:30.214Z --- 2026-10-16T14:18:30.214Z duration_ms: 1893.76525 2026-10-16T14:18:30.214Z type: 'test' 2026-10-16T14:18:30.214Z ... 2026-10-16T14:18:32.202Z # Subtest: security: webhooks reach only public hosts other than Diffinery, at most 20 per repository 2026-10-16T14:18:32.202Z ok 42 - security: webhooks reach only public hosts other than Diffinery, at most 20 per repository 2026-10-16T14:18:32.202Z --- 2026-10-16T14:18:32.202Z duration_ms: 1985.56062 2026-10-16T14:18:32.202Z type: 'test' 2026-10-16T14:18:32.202Z ... 2026-10-16T14:18:36.058Z # Subtest: security: invitations and test emails have limits, so an account can't be used to send mail in bulk 2026-10-16T14:18:36.059Z ok 43 - security: invitations and test emails have limits, so an account can't be used to send mail in bulk 2026-10-16T14:18:36.059Z --- 2026-10-16T14:18:36.059Z duration_ms: 3857.85477 2026-10-16T14:18:36.059Z type: 'test' 2026-10-16T14:18:36.059Z ... 2026-10-16T14:18:36.978Z # Subtest: security: inputs that were taken on trust are checked (collaborators, check links, paging, MCP batches, reserved names) 2026-10-16T14:18:36.978Z ok 44 - security: inputs that were taken on trust are checked (collaborators, check links, paging, MCP batches, reserved names) 2026-10-16T14:18:36.978Z --- 2026-10-16T14:18:36.978Z duration_ms: 919.53912 2026-10-16T14:18:36.978Z type: 'test' 2026-10-16T14:18:36.978Z ... 2026-10-16T14:18:53.875Z # Subtest: security: environment reviewers hold a deploy job until a listed person approves, and nobody else can 2026-10-16T14:18:53.875Z ok 45 - security: environment reviewers hold a deploy job until a listed person approves, and nobody else can 2026-10-16T14:18:53.875Z --- 2026-10-16T14:18:53.875Z duration_ms: 16888.32611 2026-10-16T14:18:53.876Z type: 'test' 2026-10-16T14:18:53.876Z ... 2026-10-16T14:18:57.935Z # Subtest: security: adding someone by username sends an invitation, and they get access only once they accept 2026-10-16T14:18:57.935Z ok 46 - security: adding someone by username sends an invitation, and they get access only once they accept 2026-10-16T14:18:57.935Z --- 2026-10-16T14:18:57.935Z duration_ms: 4067.15614 2026-10-16T14:18:57.935Z type: 'test' 2026-10-16T14:18:57.935Z ... 2026-10-16T14:20:06.125Z # Subtest: security: per-account quotas on hosted minutes, hosted jobs at once, sandboxes and repositories 2026-10-16T14:20:06.125Z ok 47 - security: per-account quotas on hosted minutes, hosted jobs at once, sandboxes and repositories 2026-10-16T14:20:06.140Z --- 2026-10-16T14:20:06.140Z duration_ms: 68185.61256 2026-10-16T14:20:06.140Z type: 'test' 2026-10-16T14:20:06.140Z ... 2026-10-16T14:20:12.571Z # Subtest: security: a per-account storage quota refuses pushes, Git LFS and release asset uploads past it; reads and deletes keep working 2026-10-16T14:20:12.571Z ok 48 - security: a per-account storage quota refuses pushes, Git LFS and release asset uploads past it; reads and deletes keep working 2026-10-16T14:20:12.572Z --- 2026-10-16T14:20:12.572Z duration_ms: 6445.22282 2026-10-16T14:20:12.572Z type: 'test' 2026-10-16T14:20:12.572Z ... 2026-10-16T14:20:57.245Z # Subtest: security: kill switches suspend Actions for a repository or an account, and pause hosted compute on the instance 2026-10-16T14:20:57.245Z ok 49 - security: kill switches suspend Actions for a repository or an account, and pause hosted compute on the instance 2026-10-16T14:20:57.245Z --- 2026-10-16T14:20:57.245Z duration_ms: 44527.11311 2026-10-16T14:20:57.245Z type: 'test' 2026-10-16T14:20:57.245Z ... 2026-10-16T14:21:38.717Z # Subtest: status page: anyone can read it, and everything is operational at first 2026-10-16T14:21:38.717Z ok 50 - status page: anyone can read it, and everything is operational at first 2026-10-16T14:21:38.718Z --- 2026-10-16T14:21:38.718Z duration_ms: 41176.3988 2026-10-16T14:21:38.718Z type: 'test' 2026-10-16T14:21:38.718Z ... 2026-10-16T14:21:39.022Z # Subtest: status page: only site administrators can manage incidents (404 for anyone else) 2026-10-16T14:21:39.022Z ok 51 - status page: only site administrators can manage incidents (404 for anyone else) 2026-10-16T14:21:39.022Z --- 2026-10-16T14:21:39.022Z duration_ms: 305.41347 2026-10-16T14:21:39.022Z type: 'test' 2026-10-16T14:21:39.022Z ... 2026-10-16T14:21:39.240Z # Subtest: status page: a site administrator opens an incident through the API, and the page shows it 2026-10-16T14:21:39.240Z ok 52 - status page: a site administrator opens an incident through the API, and the page shows it 2026-10-16T14:21:39.240Z --- 2026-10-16T14:21:39.240Z duration_ms: 219.65614 2026-10-16T14:21:39.240Z type: 'test' 2026-10-16T14:21:39.240Z ... 2026-10-16T14:21:39.925Z # Subtest: status page: the web form opens an incident with several components and posts updates 2026-10-16T14:21:39.926Z ok 53 - status page: the web form opens an incident with several components and posts updates 2026-10-16T14:21:39.926Z --- 2026-10-16T14:21:39.926Z duration_ms: 683.99463 2026-10-16T14:21:39.926Z type: 'test' 2026-10-16T14:21:39.926Z ... 2026-10-16T14:21:40.120Z # Subtest: status page: resolving through the API returns the component to operational and moves the incident to past incidents 2026-10-16T14:21:40.120Z ok 54 - status page: resolving through the API returns the component to operational and moves the incident to past incidents 2026-10-16T14:21:40.120Z --- 2026-10-16T14:21:40.120Z duration_ms: 195.01479 2026-10-16T14:21:40.120Z type: 'test' 2026-10-16T14:21:40.120Z ... 2026-10-16T14:21:40.162Z # Subtest: status page: changes are audited without the updates' text 2026-10-16T14:21:40.163Z ok 55 - status page: changes are audited without the updates' text 2026-10-16T14:21:40.163Z --- 2026-10-16T14:21:40.163Z duration_ms: 39.69461 2026-10-16T14:21:40.163Z type: 'test' 2026-10-16T14:21:40.163Z ... 2026-10-16T14:21:40.410Z # Subtest: status page: pausing hosted compute shows Actions and agent sandboxes under maintenance 2026-10-16T14:21:40.410Z ok 56 - status page: pausing hosted compute shows Actions and agent sandboxes under maintenance 2026-10-16T14:21:40.410Z --- 2026-10-16T14:21:40.410Z duration_ms: 221.27406 2026-10-16T14:21:40.410Z type: 'test' 2026-10-16T14:21:40.410Z ... 2026-10-16T14:21:40.549Z 1..56 2026-10-16T14:21:40.549Z # tests 56 2026-10-16T14:21:40.549Z # suites 0 2026-10-16T14:21:40.549Z # pass 56 2026-10-16T14:21:40.550Z # fail 0 2026-10-16T14:21:40.550Z # cancelled 0 2026-10-16T14:21:40.550Z # skipped 0 2026-10-16T14:21:40.550Z # todo 0 2026-10-16T14:21:40.550Z # duration_ms 481895.1839 2026-10-16T14:21:40.700Z Cache hit occurred on the primary key node-cache-Linux-x64-pnpm-aa519d0d5d7e5a224fb440987e5331e1cb7b3a95e67805db372d6def9572f2b0, not saving cache. 2026-10-16T14:21:41.098Z Pruning is unnecessary. 2026-10-16T14:21:41.263Z Removing persisted credentials 2026-10-16T14:21:41.335Z Job completed with conclusion: success 2026-10-16T14:21:41.337Z Resources: 1.1 of 4 vCPUs busy on average (2.0 at the 95th percentile), peak memory 2.9 GiB of 11.9 GiB, peak disk 2.3 GB of 19.3 GB