Skip to content

ci: run every local-gate drift check in CI, and guard the two lists against drifting again - #10280

Merged
JSONbored merged 1 commit into
mainfrom
claude/wire-drift-checks-into-ci
Aug 1, 2026
Merged

ci: run every local-gate drift check in CI, and guard the two lists against drifting again#10280
JSONbored merged 1 commit into
mainfrom
claude/wire-drift-checks-into-ci

ci: run every local-gate drift check in CI, and guard the two lists a…

82e1971
Select commit
Loading
Failed to load commit list.
Superagent Security / Superagent Supply Chain Scan failed Aug 1, 2026 in 12s

Supply chain risks detected

3 actionable risks across 3 changed dependencies.

Details

Dependency changes

  • actions/cache/restore (github-action) added 55cc8345863c7cc4c66a329aec7e433d2d1c52a9
  • actions/checkout (github-action) added 3d3c42e5aac5ba805825da76410c181273ba90b1
  • codecov/codecov-action (github-action) added fb8b3582c8e4def4969c97caa2f19720cb33a72f

Actionable risks

  • HIGH: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 — Detects keylogging and input capture patterns. Location: cache-55cc8345863c7cc4c66a329aec7e433d2d1c52a9/dist/restore-only/index.js. Rules: threat-runtime-keylogging
  • HIGH: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 — Detects keylogging and input capture patterns. Location: cache-55cc8345863c7cc4c66a329aec7e433d2d1c52a9/dist/restore-only/index.js. Rules: threat-runtime-keylogging
  • HIGH: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 — Detects keylogging and input capture patterns. Location: cache-55cc8345863c7cc4c66a329aec7e433d2d1c52a9/dist/restore-only/index.js. Rules: threat-runtime-keylogging
View more details on Superagent Security