Repository navigation

fix(security): close three ways the image-verifier liveness check reports OK without checking - #3320

Closed

devantler wants to merge 25 commits into

mainfrom

claude/image-verifier-liveness-hardening-3108

Closed

fix(security): close three ways the image-verifier liveness check reports OK without checking#3320
devantler wants to merge 25 commits into
mainfrom
claude/image-verifier-liveness-hardening-3108

Commits on Aug 22, 2026
- fix(security): close three ways the image-verifier liveness check reports OK without checking
  devantler
  committed
  11b3719
- chore: Apply megalinter fixes
  
  devantler
  authored and
  megalinter-bot
  committed
  7b1a8d0
- fix(security): address review findings on the liveness check
  devantler
  committed
  9fcad65
- chore: Apply megalinter fixes
  
  devantler
  authored and
  megalinter-bot
  committed
  075827c
Commits on Aug 23, 2026
- fix(security): match disabled_plugins entries exactly, not by substring
  devantler
  committed
  1a063d1
- fix(security): strip TOML comments before reading disabled_plugins
  
  devantler
  and
  claude
  committed
  991c81d
- fix(security): read each containerd config once, not twice
  
  devantler
  and
  claude
  committed
  0124af4
- chore: Apply megalinter fixes
  
  devantler
  authored and
  megalinter-bot
  committed
  b6c24c0
- fix(security): find the disabled_plugins terminator with a quote-aware scan
  devantler
  committed
  e8ea191
- fix(security): read a quoted disabled_plugins root key
  devantler
  committed
  4d2cbc9
- fix(scripts): parse the TOML root key instead of deleting quotes and spaces
  
  devantler
  and
  claude
  committed
  b34afea
- fix(scripts): decode TOML basic-string escapes in a quoted root key
  
  devantler
  and
  claude
  committed
  9a554ea
- fix(scripts): decode TOML basic-string escapes in array entries too
  
  devantler
  and
  claude
  committed
  68e42a7
- fix(security): read TOML multiline strings in the image-verifier liveness check
  devantler
  committed
  5f8ed7e
- fix(security): carry TOML string state across the lines of a disabled_plugins array
  devantler
  committed
  5dbb5ce
- fix(security): honour the TOML line continuation in a multiline basic string
  devantler
  committed
  78e7fd8
- fix(security): read TOML line boundaries and quote runs as containerd does
  devantler
  committed
  dc619ba
- chore: Apply megalinter fixes
  
  devantler
  authored and
  megalinter-bot
  committed
  b08165c
- fix(security): apply the quote-run rule to the line scanners, and keep string content out of root scope
  devantler
  committed
  264f7c0
- chore: Apply megalinter fixes
  
  devantler
  authored and
  megalinter-bot
  committed
  0b707f5
- fix(security): decode TOML escapes without narrowing the code point
  
  devantler
  and
  claude
  committed
  f7018d7
- fix(ci): retry when a discovered node leaves mid-pass instead of failing infra
  
  devantler
  and
  claude
  committed
  5939afa
- test(ci): guard each departure path with its own regression case
  
  devantler
  and
  claude
  committed
  b3a5a40
- test(ci): give each departure path its own still-present control
  
  devantler
  and
  claude
  committed
  93ff25b
- chore: Apply megalinter fixes
  
  devantler
  authored and
  megalinter-bot
  committed
  fcb9938

Commits

Commits on Aug 22, 2026

Commits on Aug 23, 2026