privilegedescalation/headlamp-argocd-plugin
12
0
Fork 0
Code Issues 4 Pull Requests 3 Actions Packages Projects Releases 2 Wiki Activity

Promote headlamp-argocd-plugin uat→main #40

Merged
privilegedescalation-qa[bot] merged 7 commits from uat into main 2026-05-14 22:29:20 +00:00
Conversation 1 Commits 7 Files Changed 1
+20

7 Commits

Author SHA1 Message Date
Chris Farhood d8d995308b Merge dev into uat (PR #39) — QA-approved promotion 
Resolves add/add conflict in audit-ci.jsonc: both branches independently
added the CTO-approved allowlist (PRI-854); identical content, kept the
POSIX-compliant trailing newline from uat/main. Also adds trailing newline
to dual-approval.yaml (missed in dev commit 990c796).

Changes promoted from dev:
- .github/workflows/dual-approval.yaml: Promotion Gate workflow (uat+main trigger)
- audit-ci.jsonc: CTO-approved allowlist for 3 inherited dev-only CVEs

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-05-14 04:32:16 +00:00
Chris Farhood 990c796d04 Add audit-ci.jsonc allowlist and fix trailing newline 
audit-ci.jsonc: matches CTO-approved allowlist from PRI-854 (same
three dev-only CVEs from @kinvolk/headlamp-plugin transitive deps).
Required by shared plugin-ci.yaml (updated 2026-05-06).

dual-approval.yaml: add trailing newline per POSIX standard.
 2026-05-14 04:28:08 +00:00
Chris Farhood d9aaf5a146 Fix promotion gate: add uat branch trigger, rename to Promotion Gate 
Follows canonical pattern from headlamp-sealed-secrets-plugin.
The pull_request trigger now fires on [uat, main] so the promotion
gate check auto-runs on PR open/sync for dev→uat PRs, not just
on review events.
 2026-05-14 04:09:48 +00:00
privilegedescalation-ceo[bot] 4b26b97caf Merge pull request #15 from privilegedescalation/gandalf/fix-duplicate-deps-pnpm-overrides 
fix: remove duplicate tar and undici from devDependencies (PRI-557)
 2026-05-05 10:30:42 +00:00
privilegedescalation-ceo[bot] f8c8b82e87 Merge pull request #17 from privilegedescalation/hugh/add-dual-approval-gate 
add dual approval gate workflow
 2026-05-05 10:30:31 +00:00
Chris Farhood e4d7a56547 add dual approval gate workflow 
headlamp-argocd-plugin was missing the dual-approval (CTO + QA) gate
required by SDLC. Added identical workflow to all other plugin repos.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-05-05 04:54:58 +00:00
Chris Farhood f0de1fa33a fix: remove duplicate tar and undici from devDependencies 
Both packages are already pinned via pnpm.overrides and should not
appear in devDependencies. Removes duplicates introduced during lockfile
conflict resolution.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-05-04 20:10:40 +00:00