dejima/dejima-ci-hardener
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Labels Milestones New Pull Request
0 Open 30 Closed
Label
Clear labels
Compat/Breaking
Kind/Bug
Kind/Documentation
Kind/Enhancement
Kind/Feature
Kind/Security
Kind/Testing
Priority
Critical
1
Priority
High
2
Priority
Low
4
Priority
Medium
3
Reviewed
Confirmed
1
Reviewed
Duplicate
2
Reviewed
Invalid
3
Reviewed
Won't Fix
3
Status
Abandoned
3
Status
Blocked
1
Status
Need More Info
2
Milestone
No milestone
Projects
Clear projects
Assignee
Clear assignees
branderson
dejima-agent
Describe how the GitHub mirror shows the wordmark
tests / runner-env (confined) (pull_request_target) Successful in 1m0s
Details
tests / tests (pull_request_target) Successful in 2m4s
Details
tests / compose-schema (pull_request_target) Successful in 1m10s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 59s
Details
#30
by dejima-agent was merged 2026-10-14 17:33:38 -07:00
main
github-mirror
1 approval
1
Restart dnsmasq after a render, since a reload never applied one
tests / runner-env (confined) (pull_request_target) Successful in 59s
Details
tests / tests (pull_request_target) Successful in 2m4s
Details
tests / compose-schema (pull_request_target) Successful in 1m10s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 1m3s
Details
#29
by dejima-agent was merged 2026-10-10 21:49:23 -07:00
main
dnsmasq-restart
1 approval
1
Deploy new programs without going through setup
tests / runner-env (confined) (pull_request_target) Successful in 41s
Details
tests / tests (pull_request_target) Successful in 1m48s
Details
tests / compose-schema (pull_request_target) Successful in 47s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 39s
Details
#28
by dejima-agent was merged 2026-09-02 16:16:06 -07:00
main
tools-only
1 approval
1
Have the tool check the arrangement, rather than the operator
tests / compose-schema (pull_request_target) Successful in 49s
Details
tests / runner-env (confined) (pull_request_target) Successful in 41s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 39s
Details
tests / tests (pull_request_target) Successful in 1m43s
Details
#27
by dejima-agent was merged 2026-09-02 00:43:04 -07:00
main
verify-arrangement
1 approval
1
Give each runner pool the allowlist it could actually run
tests / runner-env (confined) (pull_request_target) Successful in 38s
Details
tests / tests (pull_request_target) Successful in 1m33s
Details
tests / compose-schema (pull_request_target) Successful in 47s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 39s
Details
#26
by dejima-agent was merged 2026-09-01 23:39:22 -07:00
main
per-project-sets
1 approval
1
Make removing a name actually revoke it
tests / runner-env (confined) (pull_request_target) Successful in 40s
Details
tests / tests (pull_request_target) Successful in 1m24s
Details
tests / compose-schema (pull_request_target) Successful in 46s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 36s
Details
#25
by dejima-agent was merged 2026-09-01 02:51:17 -07:00
main
revoke-takes-effect
1 approval
2
Strip comments where every name arrives, not at one source
tests / runner-env (confined) (pull_request_target) Successful in 1m1s
Details
tests / tests (pull_request_target) Successful in 1m20s
Details
tests / compose-schema (pull_request_target) Successful in 46s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 38s
Details
#24
by dejima-agent was merged 2026-08-31 23:31:15 -07:00
main
strip-comments-once
1 approval
1
Make trusting a repository something you can do in one command
tests / runner-env (confined) (pull_request_target) Successful in 38s
Details
tests / tests (pull_request_target) Successful in 1m19s
Details
tests / compose-schema (pull_request_target) Successful in 45s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 36s
Details
#23
by dejima-agent was merged 2026-08-31 23:04:30 -07:00
main
repos-usability
1 approval
1
Give the privileged tier a working v1 to v2 path, and link the upgrade docs
tests / runner-env (confined) (pull_request_target) Successful in 45s
Details
tests / tests (pull_request_target) Successful in 1m29s
Details
tests / compose-schema (pull_request_target) Successful in 51s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 41s
Details
#22
by dejima-agent was merged 2026-08-27 21:00:17 -07:00
main
upgrade-path-privileged
1 approval
1
Install the upgrade tool on the privileged tier, which never got it
tests / runner-env (confined) (pull_request_target) Successful in 41s
Details
tests / tests (pull_request_target) Successful in 1m23s
Details
tests / compose-schema (pull_request_target) Successful in 47s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 40s
Details
#21
by dejima-agent was merged 2026-08-27 20:13:42 -07:00
main
privileged-upgrade-tool
1 approval
1
Fix a tool that could not find itself, and a note that told you not to
tests / runner-env (confined) (pull_request_target) Successful in 1m3s
Details
tests / tests (pull_request_target) Successful in 1m33s
Details
tests / compose-schema (pull_request_target) Successful in 51s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 39s
Details
#20
by dejima-agent was merged 2026-08-27 17:44:36 -07:00
main
verify-resolution
1 approval
1
Version the deployed state, so an existing runner can be brought forward
tests / runner-env (confined) (pull_request_target) Successful in 42s
Details
tests / tests (pull_request_target) Successful in 1m23s
Details
tests / compose-schema (pull_request_target) Successful in 49s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 38s
Details
#19
by dejima-agent was merged 2026-08-27 17:14:04 -07:00
main
versioning
1 approval
1
Bound the LAN over IPv6, and over the range a tailnet uses
tests / runner-env (confined) (pull_request_target) Successful in 41s
Details
tests / tests (pull_request_target) Successful in 1m12s
Details
tests / compose-schema (pull_request_target) Successful in 47s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 38s
Details
#18
by dejima-agent was merged 2026-08-25 16:55:18 -07:00
main
ipv6-boundary
1 approval
1
Send the reader between the two halves, in the order that works
tests / runner-env (confined) (pull_request_target) Successful in 32s
Details
tests / tests (pull_request_target) Successful in 1m4s
Details
tests / compose-schema (pull_request_target) Successful in 44s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 31s
Details
#17
by dejima-agent was merged 2026-08-11 20:39:47 -07:00
main
runbook-order
1 approval
1
Add the badge and the maturity disclaimer
tests / runner-env (confined) (pull_request_target) Successful in 1m40s
Details
tests / tests (pull_request_target) Successful in 2m8s
Details
tests / compose-schema (pull_request_target) Successful in 1m50s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 1m37s
Details
#16
by dejima-agent was merged 2026-08-10 21:04:20 -07:00
main
disclaimer-and-badge
1 approval
1
Bring across what the sister project grew, and write down the threat model
tests / runner-env (confined) (pull_request_target) Successful in 1m40s
Details
tests / tests (pull_request_target) Successful in 2m13s
Details
tests / compose-schema (pull_request_target) Successful in 1m54s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 1m35s
Details
#15
by dejima-agent was merged 2026-08-10 22:36:41 -07:00
main
parity
1 approval
1
Give a DHCP runner the two rules its lease actually needs
tests / runner-env (confined) (pull_request_target) Successful in 1m37s
Details
tests / tests (pull_request_target) Successful in 2m9s
Details
tests / compose-schema (pull_request_target) Successful in 1m46s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 1m38s
Details
#14
by dejima-agent was merged 2026-08-09 22:06:59 -07:00
main
dhcp-rules
1 approval
1
State plainly that there is no support, and where to send a vulnerability
tests / runner-env (confined) (pull_request_target) Successful in 1m24s
Details
tests / runner-env (confined) (pull_request) Successful in 1m26s
Details
tests / tests (pull_request) Successful in 1m53s
Details
tests / compose-schema (pull_request) Successful in 1m32s
Details
tests / tests (pull_request_target) Successful in 1m51s
Details
tests / compose-schema (pull_request_target) Successful in 1m32s
Details
tests / runner-env (privileged) (pull_request) Successful in 1m24s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 1m23s
Details
#13
by dejima-agent was merged 2026-08-09 03:13:40 -07:00
main
security-policy
1 approval
1
Pin the workflow to main, and put the wordmark on the README
tests / runner-env (confined) (pull_request_target) Successful in 1m25s
Details
tests / tests (pull_request_target) Successful in 1m50s
Details
tests / compose-schema (pull_request_target) Successful in 1m34s
Details
tests / runner-env (privileged) (pull_request_target) Successful in 1m23s
Details
#12
by dejima-agent was merged 2026-08-09 03:13:57 -07:00
main
branding-and-triggers
1 approval
1
Build the runners, rather than listing what to type
tests / runner-env (confined) (pull_request) Successful in 3m6s
Details
tests / tests (pull_request) Successful in 1m53s
Details
tests / compose-schema (pull_request) Successful in 1m34s
Details
tests / runner-env (privileged) (pull_request) Successful in 1m24s
Details
#11
by dejima-agent was merged 2026-08-08 20:03:59 -07:00
docs-restructure
runner-generator