codician/diffinerypublic

Open-source, agent-first GitHub and GitHub Actions alternative that runs on your own Cloudflare account: git hosting, pull requests, code review and drop-in GitHub Actions YAML on Workers, Durable Objects, R2 and Containers.

Commits on October 14, 2026

Security audit, part 1: forged job tokens, retired names, tokens on web pages, review and jail hardening (#187)
test-bot committed 12 days ago
1e9b201
Imports: split a refused batch of files again, and allow settings while an import runs (#181)
test-bot committed 12 days ago
5594b9d
Headless runs in the jail: model requests through a proxy outside it, only the package registries otherwise (phase 5d) (#172)
Canberk Demirci committed 12 days agosigned
f8fef6f
Terminal task jail: open a tunnel only when the TLS ClientHello asks for the CONNECT host (#163)
Canberk Demirci committed 12 days agosigned
a7e3f13
Jobs a rollout stops before their steps ran start again; hosted runners have passwordless sudo (#154)
Canberk Demirci committed 13 days agosigned
f60a1c3
Terminal tasks run in a bubblewrap jail inside the sandbox, opted into at open (#146)
Canberk Demirci committed 13 days agosigned
4372560
Runner image has the libraries Ruby needs; passing container start errors are retried; the campaign can inspect a run (#147)
Canberk Demirci committed 13 days agosigned
8e39f86
Registry hashes chunked uploads as they arrive; the Live test runs on the deployed runner image (#138)
Canberk Demirci committed 13 days agosigned
d10062f
Per-account storage quota (S11): count what repositories and packages store, refuse writes past it (#139)
Canberk Demirci committed 13 days agosigned
2eb67ab
Import campaign can re-run failed jobs; pushes that run out of memory ask to be split (#136)
Canberk Demirci committed 13 days agosigned
2c79ea1
Web-only egress for hosted compute behind EGRESS=web, off by default (#134)
Canberk Demirci committed 13 days agosigned
16676eb
Jobs whose container stops before the runner fetched them are placed again; jobs record their runner (#135)
Canberk Demirci committed 13 days agosigned
0858d86

Commits on October 13, 2026

Imports say why the server refused a push (#133)
Canberk Demirci committed 13 days agosigned
3a39201
Container rollouts: new containers get the new image at once; Deploy waits for it (#127)
Canberk Demirci committed 13 days agosigned
93ef0c8
Web terminals: a shell in a sandbox, in the browser, for its opener only (phase 4a) (#124)
Canberk Demirci committed 13 days agosigned
5619cf2
Runner image has nvm; release asset imports retry GitHub's server errors (#123)
Canberk Demirci committed 13 days agosigned
e162310
Jobs set GitHub Enterprise's URL variables; campaign reports show longer logs (#119)
Canberk Demirci committed 13 days agosigned
86edf57
Import campaign findings: stale imports, readable reports, an honest large-object error (#103)
Canberk Demirci committed 13 days agosigned
227d9a0
Deploys leave running jobs alone; a skipped deploy no longer passes the live test; steady docs test (#66)
Canberk Demirci committed 13 days agosigned
a2120c0
Agent tasks: run Claude Code, Codex or your own command with your own model key (#60)
Canberk Demirci committed 13 days agosigned
50797a8
Faster main syncs: fix the registry relay's slow uploads, gate Deploy on CI (#46)
Canberk Demirci committed 13 days agosigned
6d95237
Import repositories and organizations from GitHub (#36)
Canberk Demirci committed 13 days agosigned
ffe649f
Security and docs-review fixes, Actions runtime hardening, and needs-graph job scheduling (#29)
Canberk Demirci committed 13 days agosigned
4cfbb13
Fix docker/setup-buildx-action on hosted runners (#20)
Canberk Demirci committed 13 days agosigned
70b8cad
Container registry at diffinery.com, in place of ghcr.io (#16)
Canberk Demirci committed 13 days agosigned
31fe8fb
Let workflow env override runner defaults; run sync and live test on GitHub only (#14)
Canberk Demirci committed 13 days agosigned
7a1eadc
Docker on hosted runners, graceful rollouts, and a workflow to move this repo to Diffinery (#12)
Canberk Demirci committed 13 days agosigned
014d046
Run workflow_run workflows, add Git LFS to runners, probe Docker in containers (#11)
Canberk Demirci committed 13 days agosigned
36b475f

Commits on October 12, 2026

Support job containers, service containers and Docker actions (#7)
Canberk Demirci committed 14 days agosigned
f4c20e7
Diffinery: git forge, pull requests and Actions-compatible CI on Cloudflare (#1)
Canberk Demirci committed 14 days agosigned
5387f79