Задания, отчёты и патчи, лежавшие в C:\Users\Ochenstarik\projects и в домашней папке, перенесены в agents/. Разложено по агентам там, где имя файла позволяло определить автора; остальное — в _salvage-2026-08-18/ и разбирается вручную. Патчи в notes/salvage-2026-08-18/ — незакоммиченная работа из брошенных рабочих копий: она существовала только на диске. Тяжёлое (релизные архивы, инсталляторы, наборы данных) в репозиторий не попало: оно лежит рядом, в Agent_projects/_archive и Agent_projects/_data. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
1.7 KiB
1.7 KiB
Description
This PR implements repository hygiene and security improvements according to TASK.md.
Fixes Task B-3R
Actions SHAs
The following commands were used to retrieve the exact SHAs for the pinned actions (dereferencing annotated tags to commit SHAs where needed):
actions/checkout@v6:gh api repos/actions/checkout/git/ref/tags/v6-> dereferenced to commitd23441a48e516b6c34aea4fa41551a30e30af803actions/setup-dotnet@v5:gh api repos/actions/setup-dotnet/git/ref/tags/v5-> dereferenced to commit26b0ec14cb23fa6904739307f278c14f94c95bf1actions/upload-artifact@v6:gh api repos/actions/upload-artifact/git/ref/tags/v6-> dereferenced to commitb7c566a772e6b6bfb58ed0dc250532a479d7789factions/download-artifact@v8:gh api repos/actions/download-artifact/git/ref/tags/v8-> dereferenced to commit74a6210ce7665476a66b96e5fa3ebf68e98ec72dsoftprops/action-gh-release@v2:gh api repos/softprops/action-gh-release/git/ref/tags/v2-> dereferenced to commit3bb12739c298aeb8a4eeaf626c5b8d85266b0e65
Type of change
- Security and Repository Hygiene (non-breaking changes)
Testing Checklist
Verified Locally
- Git diff on
mainboundary files: Verified no restricted files from theTASK.mdbounds were modified (git diff --name-only main). - Workflow Syntax: Verified workflow yaml syntax.
Verified in CI
- CI tests and builds run on PR. (Awaiting GitHub Actions run after PR creation).
Not Verified
- Physical acceptance testing (
SMM_ACCEPT_RESTORE=1 SMM_ACCEPT_REBOOT=1 tests/acceptance/three-server-mesh.sh) was NOT verified because SSH- and topology parameters were not provided as perTASK.mdinstructions. Contract/mock tests were not used as a substitute for this.