mirrors / micro--go-micro

文件历史

4,591 提交 394 分支 441 Git 标签
codex/increment-3958
提交图

52 次代码提交

作者 SHA1 备注 提交日期
Asim Aslam 58b8eb3e6b docs(priorities): refresh planner queue for 3954 (#3956) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 18:29:59 +01:00
Asim Aslam 47997134af docs(priorities): refresh planner queue for 3949 (#3950) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 17:31:21 +01:00
Asim Aslam fefe3e5b4a docs(priorities): refresh planner queue for 3943 (#3944) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 16:36:35 +01:00
Asim Aslam dbca408982 docs(priorities): refresh planner queue for 3938 (#3939) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 15:42:04 +01:00
Asim Aslam 95e7c387b2 docs(priorities): refresh planner queue for 3932 (#3933) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 14:36:37 +01:00
Asim Aslam 6b86bbb27e docs(priorities): refresh planner queue for 3927 (#3928) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 13:34:42 +01:00
Asim Aslam e71e0a79fb docs(priorities): refresh planner queue for 3921 (#3922) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 12:41:51 +01:00
Asim Aslam 100c7e11b9 docs(priorities): refresh planner queue for 3913 (#3915) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 11:41:35 +01:00
Asim Aslam 71f4f6ac05 docs(priorities): refresh planner queue for 3907 (#3909) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 10:51:37 +01:00
Asim Aslam b29c8c95b1 docs(priorities): refresh planner queue for 3900 (#3904) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 10:06:16 +01:00
Asim Aslam ff94e8b316 docs(priorities): refresh planner queue for 3890 (#3892) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 08:15:25 +01:00
Asim Aslam ab0bf29c79 feat(loop): add a security role that vets for vulnerabilities (#3818) 
Adds an opt-in `security` role to `micro loop` and wires it into go-micro's own
loop. On a schedule it dispatches the agent to audit the codebase for real,
exploitable vulnerabilities and file them.

Security gets a deliberately more conservative policy than the other roles,
encoded in .github/loop/prompts/security.md:
- NEVER auto-merges a security change (fixes stay human-reviewed).
- NEVER publishes exploit detail / PoC in a public issue — novel exploitable
  findings get a concise `security` + `needs-human` issue (class, location,
  impact) routed to private disclosure; only known/public dep CVEs get a
  bump PR (no auto-merge).
- Weekly by default (`--security-cron`, 0 6 * * 1); tunable.

The go-micro prompt targets its real attack surface: MCP/A2A gateways, x402
payments, JWT/wrapper auth, provider BaseURL SSRF + key leakage, the agent
tool loop (prompt injection / guardrail bypass), TLS defaults, the loop's own
PAT, and dependency CVEs via govulncheck.

Note: an agent review is not a gate. The deterministic companion — govulncheck
as a required CI check — is a recommended follow-up so known-vulnerable deps
can't merge at all.


Claude-Session: https://claude.ai/code/session_01CmdEY7pYmV5zzwCjNJ4ykL

Co-authored-by: Claude <noreply@anthropic.com>
 2026-07-04 07:03:08 +01:00
Asim Aslam c60c03d485 docs(priorities): refresh planner queue for 3885 (#3886) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 06:25:38 +01:00
Asim Aslam 593846093f docs(priorities): refresh planner queue for 3878 (#3881) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 04:10:29 +01:00
Asim Aslam 0a10655231 docs(priorities): refresh planner queue for 3873 (#3874) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 02:49:04 +01:00
Asim Aslam 014a6431f2 docs(priorities): refresh planner queue for 3866 (#3868) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 01:46:02 +01:00
Asim Aslam b24b19f191 docs(priorities): refresh planner queue for 3862 (#3863) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-04 00:34:46 +01:00
Asim Aslam 522786d21d docs(priorities): refresh planner queue for 3856 (#3858) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 23:25:03 +01:00
Asim Aslam f96b1014a2 docs(priorities): refresh planner queue for 3852 (#3853) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 22:34:49 +01:00
Asim Aslam 69e23eb1f6 docs(priorities): refresh planner queue for 3846 (#3848) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 21:34:55 +01:00
Asim Aslam 6f9994b3ea docs(priorities): refresh planner queue for 3840 (#3842) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 20:33:13 +01:00
Asim Aslam b3940860b6 docs(priorities): refresh planner queue for 3835 (#3836) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 19:39:51 +01:00
Asim Aslam 9e7273dde1 docs(priorities): refresh planner queue for 3829 (#3830) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 18:42:19 +01:00
Asim Aslam c3df8b833d docs(priorities): refresh planner queue for 3823 (#3824) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 17:38:33 +01:00
Asim Aslam 9def03d4e3 docs(priorities): refresh planner queue for 3817 (#3819) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 16:51:21 +01:00
Asim Aslam 0a547fbe17 docs(priorities): refresh planner queue for 3812 (#3813) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 15:55:48 +01:00
Asim Aslam 7db1d986ab docs(priorities): refresh planner queue for 3808 (#3809) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 14:48:47 +01:00
Asim Aslam bff916a3ac docs(priorities): refresh planner queue for 3800 (#3802) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 13:42:57 +01:00
Asim Aslam 04bcef47ac docs(priorities): refresh planner queue for 3795 (#3796) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 12:58:27 +01:00
Asim Aslam 695a24432a docs(priorities): refresh planner queue for 3790 (#3791) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 12:00:11 +01:00
Asim Aslam af7b4f3d50 docs(priorities): refresh planner queue for 3777 (#3778) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 10:17:04 +01:00
Asim Aslam c645c5faa7 docs(priorities): refresh planner queue for 3768 (#3770) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 08:18:32 +01:00
Asim Aslam 8bde01bdac docs(priorities): refresh planner queue for 3763 (#3764) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 06:31:05 +01:00
Asim Aslam 838b7f73f8 docs(priorities): refresh planner queue for 3757 (#3758) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 04:20:35 +01:00
Asim Aslam 6edc0de7bd docs(priorities): refresh planner queue for 3752 (#3753) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 02:46:16 +01:00
Asim Aslam 6840ae0fb1 docs(priorities): refresh planner queue for 3745 (#3746) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 01:45:59 +01:00
Asim Aslam 79d443839d docs(priorities): refresh planner queue for 3739 (#3740) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-03 00:33:57 +01:00
Asim Aslam 9f1f0aa191 docs(priorities): refresh planner queue for 3732 (#3733) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-02 23:28:01 +01:00
Asim Aslam d2c3c5e715 docs(priorities): refresh planner queue for 3727 (#3728) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-02 22:35:19 +01:00
Asim Aslam a057df54f5 docs(priorities): refresh planner queue (#3722) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-02 21:38:35 +01:00
Asim Aslam 9ec9bf906c docs(priorities): refresh planner queue (#3716) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-02 20:41:47 +01:00
Asim Aslam cf790048ad loop: triage watches Lint + Run Tests too, not just the harness (#3714) 
Backstop for the gate: previously loop-triage only fired on Harness (E2E)
failures, so a red lint or test on master (e.g. the misspell that slipped past
because golangci-lint isn't a required check) produced no fix issue. Now triage
watches all the gate workflows.

- micro loop: `--ci-workflow` accepts a comma-separated list of workflow names,
  rendered into the triage workflow_run trigger as a YAML array; the issue names
  the actual failed workflow via github.event.workflow_run.name. (generic CLI)
- go-micro: regenerate loop-triage.yml to watch "Harness (E2E)", "Lint",
  "Run Tests"; generalize the triage prompt beyond the harness (a lint/test
  failure on master is a real regression to fix, not a flake to ignore).
- Docs: update CONTINUOUS_IMPROVEMENT.md triage description.

Note: this is defense-in-depth. The primary fix is making golangci-lint a
required status check so red lint can't merge in the first place — that stays
with the human (branch protection).


Claude-Session: https://claude.ai/code/session_01CmdEY7pYmV5zzwCjNJ4ykL

Co-authored-by: Claude <noreply@anthropic.com>
 2026-07-02 20:21:07 +01:00
Asim Aslam 7d464e8a32 docs(priorities): refresh planner queue (#3709) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-02 19:43:47 +01:00
Asim Aslam 33b6ab5eea docs(priorities): refresh planner queue (#3703) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-02 18:45:41 +01:00
Asim Aslam 917d60f9f8 docs(priorities): refresh planner queue (#3697) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-02 17:38:37 +01:00
Asim Aslam c25fe16260 docs(priorities): drop completed universe item (#3691) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-02 17:01:49 +01:00
Asim Aslam 33a4af3984 docs(priorities): refresh planner queue (#3686) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-02 16:00:17 +01:00
Asim Aslam 6b6100340b docs(priorities): refresh planner queue (#3680) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-02 14:40:53 +01:00
Asim Aslam c13ff9fc98 docs(priorities): refresh planner queue (#3672) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-02 13:52:31 +01:00
Asim Aslam 75615e81ca docs(priorities): refresh planner queue (#3666) 
Co-authored-by: Codex <codex@openai.com>
 2026-07-02 13:02:25 +01:00