codebase-memory-mcp

mirror of https://github.com/DeusData/codebase-memory-mcp.git synced 2026-11-05 08:23:53 +08:00

Files

T

Martin Vogel c634c86d1a ci(windows): protected per-user temp root + explicit owner on staged guards

Completes the handoff task for the Windows harness: the native test job
ran with the MSYS-shared /tmp and the runner's inherited
LocalAppData\Temp ACLs, which the daemon's strict private-filesystem
checks reject by design. The test-windows job now creates a per-user
root under the profile with an owner-stamped, protected current-SID
DACL and routes TEMP/TMP (native form) and TMPDIR (POSIX form) through
it before scripts/test.sh runs.

The guards script already hardened its root DACL but ownership is never
inherited on Windows: bundle copies created by the admin-group runner
token can come out Administrators-owned, and the launcher's exe policy
requires the exact current user as owner. Stamp the current SID on the
staged bundle dir and both executables explicitly.

Job topology, gates, and triggers are unchanged; the new step is a
sub-second pwsh block in the existing test-windows job.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-07-18 16:58:10 +02:00

ISSUE_TEMPLATE

feat(diag): persistent memory trajectory + query-leak CI soak for #581

2026-06-28 23:28:01 +02:00

workflows

ci(windows): protected per-user temp root + explicit owner on staged guards

2026-07-18 16:58:10 +02:00

CODEOWNERS

docs: make maintainer policy project-oriented

2026-06-29 00:00:10 +02:00

dependabot.yml

Pin Actions to SHA + enforce via security audit + Dependabot