feat(cli): explode archive materials in chainloop att add#3253

Closed

javirln wants to merge 14 commits into

chainloop-dev:mainfrom

javirln:zip-files

Commits on Jun 29, 2026

docs: add archive explode implementation plan
javirln
committed
feat(cli): detect archive materials for att add explode path
javirln
committed
feat(cli): walk archive entries with zip-bomb and traversal guards
javirln
committed
fix(cli): reject absolute and traversal paths in archive walk
javirln
committed
feat(cli): add archive-native allowlist and entry name allocation
javirln
committed
refactor(crafter): split material crafting from state persistence
javirln
committed
feat(crafter): add AddMaterialsFromArchive for atomic archive expansion
javirln
committed
fix(crafter): roll back policy evaluations and name temp files by entry on archive expand
javirln
committed
feat(cli): route att add to archive explode path
javirln
committed
feat(cli): add archive extraction guard flags and multi-material output
javirln
committed
test(crafter): cover archive explode behavior; regen CLI docs
javirln
committed
fix(crafter): export ErrUnsafeEntry sentinel and assert it in archive tests
javirln
committed
fix(cli): correct archive detection for non-file values and tighten guards
javirln
committed

Commits on Jun 30, 2026

fix(cli): address archive-explode code review findings
javirln
committed