Abdessamad Derraz e5cc1b5255 refactor: keep tokens out of autorun job steps ...

Every step, gate and recomputation runs with an allowlisted environment (PATH, HOME, LANG, LC_*, TZ, TMPDIR and the variables its env: key names). Names holding TOKEN, SECRET or PASS are dropped and refused in the registry. Only the push and the gh calls that read CI get GITHUB_TOKEN.

2026-10-27 11:48:22 +01:00

..

exporter

feat: name doubled destinations in exports

2026-10-24 02:42:04 +02:00

scraper

fix: keep release profiles on the build they pin

2026-10-23 16:41:58 +02:00

__init__.py

docs: write prose without dashes or semicolons

2026-10-19 06:47:31 +02:00

artifacts.py

feat: read measurements at a pinned commit

2026-10-27 08:30:11 +01:00

auto_fetch.py

fix: accept downloads by cryptographic hash only

2026-10-21 10:04:20 +02:00

autorun.py

refactor: keep tokens out of autorun job steps

2026-10-27 11:48:22 +01:00

bios_integrity.py

feat: add bios_integrity.py for bit flips

2026-10-27 10:40:06 +01:00

build_port.py

feat: ship the muos glyph the app header names

2026-10-26 21:14:24 +01:00

bundled_only.py

chore: drop copies only an install provides

2026-10-20 10:17:08 +02:00

campaign_profiles.py

feat: add the real-condition campaign runner

2026-10-27 11:38:01 +01:00

campaign_rules.py

feat: add the real-condition campaign runner

2026-10-27 11:38:01 +01:00

campaign.py

feat: add the real-condition campaign runner

2026-10-27 11:38:01 +01:00

check_buildbot_system.py

docs: write prose without dashes or semicolons

2026-10-19 06:47:31 +02:00

check_freshness.py

refactor: read measurements from the local tree

2026-10-27 09:11:12 +01:00

check_platform_folder.py

fix: exit 1 when the folder check finds gaps

2026-10-24 00:51:13 +02:00

check_release_assets.py

fix: load every script under the 3.9 floor

2026-10-21 09:53:34 +02:00

check_release.py

feat: attach the installer to each release

2026-10-23 18:48:02 +02:00

cleanup_disk.py

feat: add cleanup_disk.py with a disk alert

2026-10-27 10:40:06 +01:00

common.py

feat: release packs for marked platforms only

2026-10-23 17:06:46 +02:00

core_probe.py

feat: add the real-condition campaign runner

2026-10-27 11:38:01 +01:00

cross_reference.py

fix: credit readers the file their pack resolves

2026-10-23 13:03:39 +02:00

crypto_verify.py

chore: merge round 2 fixes (tests)

2026-10-21 10:29:19 +02:00

dedup.py

fix: collapse clone chains in the dedup map

2026-10-22 15:27:58 +02:00

derivations.py

fix: transform each held content once

2026-10-21 09:56:53 +02:00

deterministic_zip.py

refactor: stream zip rebuild instead of buffering

2026-08-08 04:40:07 +02:00

diff_truth.py

fix: accept -p and -t in every tool

2026-10-21 10:11:22 +02:00

download.py

feat: permanent download page per platform

2026-10-23 17:06:51 +02:00

download.sh

feat: permanent download page per platform

2026-10-23 17:06:51 +02:00

dumpcatalog.py

docs: write prose without dashes or semicolons

2026-10-19 06:47:31 +02:00

export_native.py

feat: name doubled destinations in exports

2026-10-24 02:42:04 +02:00

fetch_site_images.py

chore: bizhawk app icon, minui initials

2026-10-23 20:04:12 +02:00

fileless_audit.py

feat: each citation names the code that asks

2026-10-20 05:52:13 +02:00

find_pinned_revision.py

docs: give every command-line option a help text

2026-10-19 04:23:34 +02:00

gamedata.py

feat: add a --no-game-data pack narrowing

2026-10-22 06:19:05 +02:00

generate_db.py

fix: attach profile aliases by held content

2026-10-23 12:58:06 +02:00

generate_event_schema.py

feat: put the retrobios app on a handheld card

2026-10-26 21:01:45 +01:00

generate_installer_doc.py

feat: write installer tables from install.py

2026-10-27 09:47:44 +01:00

generate_launcher_index.py

feat: put the retrobios app on a handheld card

2026-10-26 21:01:45 +01:00

generate_pack.py

fix: start each pack run with no stale notices

2026-10-24 02:34:47 +02:00

generate_readme.py

docs: say the installer opens a full screen

2026-10-24 03:49:10 +02:00

generate_site.py

refactor: read measurements from the local tree

2026-10-27 09:11:12 +01:00

generate_truth.py

fix: count data directory readers in truth

2026-10-21 11:07:40 +02:00

hashing.py

fix: check a forced rehash against the last one

2026-10-20 03:24:55 +02:00

identity.py

chore: file QEMU, Roland, Chihiro and Oric

2026-10-23 13:49:37 +02:00

largefiles.py

fix: ask the release only for registered names

2026-10-21 10:06:11 +02:00

launchers.py

chore: merge round 4 fixes (links)

2026-10-21 13:19:44 +02:00

list_platforms.py

fix: make maintainer tool output actionable

2026-10-21 04:42:01 +02:00

make_og_cards.py

feat: share cards for manufacturer pages

2026-10-23 10:56:33 +02:00

make_site_icons.py

feat: build the site with Astro Starlight

2026-10-22 18:47:22 +02:00

mame_ref_audit.py

feat: each citation names the code that asks

2026-10-20 05:52:13 +02:00

manifestselect.py

fix: give shared files every reading system

2026-10-23 00:35:47 +02:00

measurement_records.py

feat: add the real-condition campaign runner

2026-10-27 11:38:01 +01:00

migrate.py

chore: file QEMU, Roland, Chihiro and Oric

2026-10-23 13:49:37 +02:00

nativemode.py

docs: write prose without dashes or semicolons

2026-10-19 06:47:31 +02:00

packextras.py

fix: place core extras by one destination rule

2026-10-24 02:31:48 +02:00

packpaths.py

fix: keep Batocera's save files apart from bios/

2026-10-22 21:44:14 +02:00

packreadme.py

feat: place save-dir files in each system folder

2026-10-22 21:16:59 +02:00

packresolve.py

fix: count an uncached release asset as fetched

2026-10-21 10:50:03 +02:00

packverify.py

feat: add a --no-game-data pack narrowing

2026-10-22 06:19:05 +02:00

pipeline.py

fix: run pipeline children without node's cache

2026-10-23 19:19:49 +02:00

profile_sync.py

fix: judge each build's refs in its own tree

2026-10-27 05:41:27 +01:00

provenance_report.py

feat: name the profile a missing dump would fill

2026-10-21 10:05:10 +02:00

refresh_data_dirs.py

chore: merge round 2 fixes (tooling)

2026-10-21 10:31:04 +02:00

refresh_stale.py

chore: merge the autorun runner and jobs

2026-10-27 10:41:53 +01:00

region_audit.py

docs: write prose without dashes or semicolons

2026-10-19 06:47:31 +02:00

region.py

feat: accept ISO country codes for --region

2026-10-21 10:12:07 +02:00

release_notes.py

feat: permanent download page per platform

2026-10-23 17:06:51 +02:00

release_record.py

feat: add schema_version to release.json

2026-10-23 18:52:04 +02:00

restore_large_files.py

docs: give every command-line option a help text

2026-10-19 04:23:34 +02:00

romset_recipes.py

fix: make maintainer tool output actionable

2026-10-21 04:42:01 +02:00

safeparse.py

docs: write prose without dashes or semicolons

2026-10-19 06:47:31 +02:00

sect233r1.py

chore: drop label comments across scripts

2026-10-21 10:06:39 +02:00

sitediagrams.py

feat: write installer tables from install.py

2026-10-27 09:47:44 +01:00

siteexports.py

feat: name doubled destinations in exports

2026-10-24 02:42:04 +02:00

siteguides.py

feat: card computers and retrooz folder in guides

2026-10-24 00:54:00 +02:00

sitemarkup.py

feat: network route and offline line on setups

2026-10-23 18:54:01 +02:00

sitemeasurements.py

feat: add the real-condition campaign runner

2026-10-27 11:38:01 +01:00

siterender.py

chore: drop a system name no source uses

2026-10-24 01:26:49 +02:00

sitesources.py

fix: keep the paths of a tree no folder lists

2026-10-27 05:55:10 +01:00

sitestarlight.py

feat: show measurements on the site

2026-10-27 08:30:16 +01:00

sitewrite.py

fix: settle the round 4 site merge

2026-10-23 20:04:33 +02:00

slot.py

docs: no double hyphen used as a dash

2026-10-20 06:23:02 +02:00

slots.py

feat: name doubled destinations in exports

2026-10-24 02:42:04 +02:00

sourceref.py

fix: write prose and quoted refs as written

2026-10-23 17:23:01 +02:00

split_pack.py

feat: mark each pack part with its siblings

2026-10-23 07:09:43 +02:00

sync_release_assets.py

feat: add sync_release_assets.py

2026-10-27 10:40:06 +01:00

torrentzip.py

docs: write prose without dashes or semicolons

2026-10-19 06:47:31 +02:00

truth.py

fix: count data directory readers in truth

2026-10-21 11:07:40 +02:00

upstream.py

fix: ask again for a tip older than the pin

2026-10-24 02:00:21 +02:00

validate_pr.py

feat: name the folder of a profile-only file

2026-10-21 10:13:09 +02:00

validate_schemas.py

feat: add the real-condition campaign runner

2026-10-27 11:38:01 +01:00

validate_site.py

feat: search fields and descriptions from pages

2026-10-23 18:58:55 +02:00

validation.py

feat: place save-dir files in packs and lists

2026-10-22 19:58:26 +02:00

verify.py

fix: name the file existence mode finds

2026-10-23 07:16:05 +02:00

ziptools.py

fix: give atomic writes the umask mode

2026-10-21 06:09:55 +02:00