phernandez 33fdd3d44e test(ci): scope bossbot untrusted-head guard to dangerous PR fields ...

The guard banned any github.event.pull_request reference, but the
recheck job legitimately needs the numeric PR id. Allow exactly
.number and keep forbidding head checkout and attacker-controlled
string fields.

Signed-off-by: phernandez <paul@basicmachines.co>

2026-06-09 23:31:14 -05:00

..

test_bm_bossbot_workflow.py

test(ci): scope bossbot untrusted-head guard to dangerous PR fields

2026-06-09 23:31:14 -05:00

test_project_updates.py

fix(ci): improve auto bm note narrative (#893)

2026-06-04 22:34:57 -05:00

test_testmon_cache.py

ci(ci): use pytestmon and Depot runners (#928)

2026-06-09 19:20:08 -05:00

test_validate_skills.py

fix(skills): reject invalid frontmatter YAML (#896)

2026-06-05 13:14:27 -05:00