Carlos Polop
8a9a5e2c94
Sort package vulnerabilities by criticality
2026-06-30 15:34:22 +02:00
Carlos Polop
93c9b909e6
ci: auto-merge trusted generated PRs
2026-06-30 14:42:50 +02:00
Carlos Polop
4618657125
Add winPEAS online package vulnerability lookup
2026-06-29 14:34:27 +02:00
Carlos Polop and Claude Opus 4.8
f4c29dbb03
ci: build, wait and merge windows definition PRs inline (no workflow_run/PAT-dispatch)
...
CODEX_FIXER_TOKEN is a fine-grained PAT with Contents/Pull-requests write but NOT
Actions:write, so it cannot create a workflow_dispatch event; and a github.token
-dispatched run never emits a workflow_run event to drive the triage merge job. So
neither half of the old cross-workflow design could work.
Instead, update_windows_version_definitions.yml now dispatches PR-tests with
github.token (this workflow already has actions:write), polls that run directly,
and on success squash-merges the PR with the CODEX_FIXER_TOKEN PAT so the push to
master triggers CI-master_test -> Publish_release. Remove the now-dead
auto_merge_windows_definition_bot_pr job from chack-agent-pr-triage.yml and the
temporary token probe. Bump the job timeout to 90m to cover the inline wait.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:33:50 +02:00
Carlos Polop and Claude Opus 4.8
e193030157
ci: probe CODEX_FIXER_TOKEN contents/PR write (temporary)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:31:00 +02:00
Carlos Polop and Claude Opus 4.8
5ca6d6b797
ci: use CODEX_FIXER_TOKEN for bot PR auto-merge (secret CHACK_AGENT_FIXER_TOKEN never existed)
...
The workflows referenced a secret (CHACK_AGENT_FIXER_TOKEN) that does not exist
in the repo, so it resolved to empty and the windows-definitions auto-merge could
neither dispatch PR-tests nor merge. Point every reference at the existing
CODEX_FIXER_TOKEN PAT (fine-grained, admin on the repo) instead. Remove the
temporary token probe.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:24:19 +02:00
Carlos Polop and Claude Opus 4.8
dd11345f50
ci: temporary token probe (to be removed)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:21:46 +02:00
Carlos Polop and Claude Opus 4.8
0a1b242fcf
ci: actually auto-merge windows definition bot PRs
...
Dispatch PR-tests with a PAT instead of github.token: a workflow run owned
by GITHUB_TOKEN does not emit a downstream `workflow_run` event, so the
chack-agent-pr-triage auto-merge job never fired for the bot PR. Also accept
the UNSTABLE merge state (the bot PR's `action_required` pull_request run
keeps it permanently UNSTABLE) and drop the explicit CI-master_test dispatch
since the PAT squash-merge's push to master already triggers the release,
avoiding a double release.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:08:59 +02:00
Carlos Polop
e7ac3b2d0e
ci: allow master release publishing
2026-06-05 00:51:35 +02:00
Carlos Polop
3a7f622b47
ci: release after trusted windows definitions merge
2026-06-05 00:40:25 +02:00
Carlos Polop
9c109c2d35
ci: require release-triggering token for windows auto-merge
2026-06-05 00:38:42 +02:00
Carlos Polop
c7f41f985c
ci: trigger release workflow after windows definitions auto-merge
2026-06-05 00:16:31 +02:00
Carlos Polop
ade17cfd05
ci: auto-merge windows definition PRs reliably
2026-06-04 23:39:19 +02:00
Carlos Polop
18ea88b35b
Expand linPEAS module metadata tests
2026-05-21 13:24:52 +02:00
Carlos Polop
1ea8107bf5
Fix bot PR auto-merge and linpeas exclude matching
2026-05-21 13:03:38 +02:00
Carlos Polop
2d0eb60e5c
ci: merge validated windows definition PRs
2026-04-30 12:00:32 +02:00
Carlos Polop
96b5185cd4
ci: update windows definition bot branch reliably
2026-04-30 11:43:25 +02:00
Carlos Polop
7e16c4c635
ci: auto-merge windows definition update PRs
2026-04-30 10:59:50 +02:00
Carlos Polop
eb2c3fbfd1
ci: bound windows definition updater runtime
2026-04-30 10:32:57 +02:00
Carlos Polop
3b079e9463
ci: validate windows version definition updates
2026-04-30 10:03:59 +02:00
Carlos Polop
ac133717d2
Add OpenAI fallback to Chack workflows
2026-03-19 19:11:09 +01:00
Carlos Polop
ca59d6d0e0
Switch Chack workflows to Codex access token
2026-03-19 19:07:56 +01:00
Carlos Polop
aafdfcdcee
f
2026-03-15 22:36:55 +01:00
Carlos Polop
287fcc2332
f
2026-03-08 16:04:29 +01:00
Carlos Polop
2f923de45a
f
2026-03-07 18:51:19 +01:00
Carlos Polop
d44e5b5c5b
f
2026-03-07 15:01:54 +01:00
Carlos Polop
954e496636
f
2026-03-01 20:42:05 +01:00
Carlos Polop
fce03212ab
f
2026-02-28 15:32:42 +01:00
Carlos Polop
6305f8f7c4
f
2026-02-28 14:26:41 +01:00
Carlos Polop
1d5c216d0c
f
2026-02-26 01:35:43 +01:00
Carlos Polop
ccf1ca847e
Merge branch 'master' of github.com:peass-ng/PEASS-ng
2026-02-26 01:33:28 +01:00
Carlos Polop
a441eee83a
check windows exploits
2026-02-26 01:33:15 +01:00
39e475923f
Auto-merge PR #605 (Chack Agent)
...
* ci: speed up PR-tests and add linpeas typo fixture
* Fix syntax: use '==' in __main__ guard in linpeas_builder.py
* ci: retrigger pr-tests after fixer
* f
* kernel checks
* Revert PR changes to PR-tests.yml and regexes.yaml (#606 )
* Initial plan
* revert: remove PR changes to PR-tests.yml and regexes.yaml
Co-authored-by: carlospolop <17181413+carlospolop@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: carlospolop <17181413+carlospolop@users.noreply.github.com >
---------
Co-authored-by: chack-agent <chack-agent@users.noreply.github.com >
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: carlospolop <17181413+carlospolop@users.noreply.github.com >
2026-02-26 00:28:24 +00:00
Carlos Polop
98e5e7c3f2
f
2026-02-24 21:31:15 +01:00
Carlos Polop
3cb5411468
ci: allow chack-agent workflow edits to be pushed
2026-02-24 21:04:53 +01:00
Carlos Polop
1375f61d38
workflow: exclude chack temp artifacts from sanitized master-fix patch
2026-02-14 01:37:17 +01:00
Carlos Polop
45105f6f39
workflow: always sanitize master-fixer output to non-workflow diff
2026-02-14 01:28:56 +01:00
Carlos Polop
da70f4f64f
workflow: tolerate pr-creation policy block in master fixer
2026-02-14 01:20:39 +01:00
Carlos Polop
45990c68c2
workflow: push chack local commits in master-failure fixer
2026-02-14 01:11:41 +01:00
Carlos Polop
44969c086d
Revert "workflow: sanitize chack commits and add failure log excerpts ( #596 )"
...
This reverts commit 1e6c83f43b
2026-02-14 01:03:10 +01:00
SirBroccoli and GitHub
1e6c83f43b
workflow: sanitize chack commits and add failure log excerpts ( #596 )
2026-02-14 00:40:02 +01:00
SirBroccoli and GitHub
993679e8a2
workflow: push chack-produced commits even when tree is clean ( #595 )
2026-02-14 00:32:56 +01:00
SirBroccoli and GitHub
82a9aecd08
ci: harden chack rerun flow and restore macos pip compatibility ( #593 )
2026-02-13 20:47:18 +01:00
SirBroccoli and GitHub
c3a942fdba
ci: remove macOS pip break-system-packages flags ( #592 )
2026-02-13 20:35:41 +01:00
SirBroccoli and GitHub
7ca05693ef
ci: fix chack agent_config key for task-steps init ( #590 )
2026-02-13 18:15:25 +01:00
SirBroccoli and GitHub
0ec20d2512
ci: enable chack workflow_run jobs and use codex backend ( #589 )
2026-02-13 18:11:02 +01:00
Carlos Polop
6a1d1efe95
ci: temporarily disable all chack-agent workflows
2026-02-11 19:36:26 +01:00
Carlos Polop
0680509774
Use CHACK_LOGS_HTTP_URL repository secret in workflows
2026-02-11 16:42:13 +01:00
Carlos Polop
3b0a8fd616
Set CHACK_LOGS_HTTP_URL for chack-agent workflows
2026-02-11 16:40:59 +01:00
Carlos Polop
62ef61af0f
Do not fail workflow when token cannot push workflow-touching refs
2026-02-11 15:57:06 +01:00
Carlos Polop