tamperward 2.10.7 → 2.10.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/cli/index.js +5 -2
  2. package/package.json +1 -1
package/dist/cli/index.js CHANGED
@@ -7663,7 +7663,7 @@ jobs:
7663
7663
  runs-on: ubuntu-latest
7664
7664
  timeout-minutes: 10
7665
7665
  steps:
7666
- - uses: actions/setup-node@v6
7666
+ - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
7667
7667
  with:
7668
7668
  node-version: 22
7669
7669
  # Install the authority before candidate files exist in the job workspace.
@@ -7673,9 +7673,12 @@ jobs:
7673
7673
  - name: Install Tamperward authority
7674
7674
  working-directory: \${{ runner.temp }}
7675
7675
  run: npm install --global --registry=https://registry.npmjs.org/ --node-options=' ' --script-shell= --ignore-scripts --offline=false --prefer-online tamperward@${TW_VERSION}
7676
- - uses: actions/checkout@v5
7676
+ - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
7677
7677
  with:
7678
7678
  fetch-depth: 0 # the range diff needs both endpoints
7679
+ # Candidate code runs later in this job. Do not leave the checkout
7680
+ # token in .git/config where a verifier command can read/reuse it.
7681
+ persist-credentials: false
7679
7682
  - name: Resolve out-of-band sign-off from PR labels
7680
7683
  id: oob
7681
7684
  env:
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "tamperward",
3
- "version": "2.10.7",
3
+ "version": "2.10.8",
4
4
  "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
5
5
  "license": "Apache-2.0",
6
6
  "author": "hexrift",