Skip to content

Add broker CI, managed secrets, and security hardening fixes - #8

Merged
dennisvink merged 7 commits into
mainfrom
develop
May 27, 2026
Merged

Add broker CI, managed secrets, and security hardening fixes#8
dennisvink merged 7 commits into
mainfrom
develop

Conversation

@dennisvink

Copy link
Copy Markdown
Contributor
  • Added broker-backed CI run records, bgit ci commands, and a bgit web CI
    view for trusted provider/materializer build handoff against broker refs.
  • Added managed CI materializer tokens with secret rotation via
    bgit admin ci rotate-secret.
  • Hardened broker security with replay-resistant v2 request signatures,
    one-time owner bootstrap tokens, constrained object capabilities, private CI
    materializer invocation, and CSRF protection for local bgit web mutations.
  • Various bug fixes

@dennisvink
dennisvink marked this pull request as ready for review May 27, 2026 14:12
@dennisvink
dennisvink merged commit 17fa55c into main May 27, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant