Skip to content

feat: architecture hardening — agent contract, pricing truth, wizard engine, timeouts, MCP, verified updates #160

feat: architecture hardening — agent contract, pricing truth, wizard engine, timeouts, MCP, verified updates

feat: architecture hardening — agent contract, pricing truth, wizard engine, timeouts, MCP, verified updates #160

Triggered via pull request August 9, 2026 16:44
Status Failure
Total duration 1m 36s
Artifacts –

security.yml

on: pull_request
GoSec (via golangci-lint)
1m 26s
GoSec (via golangci-lint)
Gitleaks (secret scanning)
36s
Gitleaks (secret scanning)
Trivy (vulnerability & misconfiguration)
20s
Trivy (vulnerability & misconfiguration)
OSV Scanner (dependency vulnerabilities)
16s
OSV Scanner (dependency vulnerabilities)
All Security Checks Passed
2s
All Security Checks Passed
Fit to window
Zoom out
Zoom in

Annotations

9 errors
GoSec (via golangci-lint)
Process completed with exit code 1.
GoSec (via golangci-lint): tests/contract/main_test.go#L143
G204: Subprocess launched with variable (gosec)
GoSec (via golangci-lint): tests/contract/main_test.go#L80
G204: Subprocess launched with variable (gosec)
GoSec (via golangci-lint): tests/contract/main_test.go#L72
G204: Subprocess launched with variable (gosec)
GoSec (via golangci-lint): internal/verda-cli/cmd/vm/wizard_template_test.go#L103
G304: Potential file inclusion via variable (gosec)
GoSec (via golangci-lint): internal/verda-cli/cmd/update/update_test.go#L217
G304: Potential file inclusion via variable (gosec)
GoSec (via golangci-lint): internal/verda-cli/cmd/update/update_test.go#L198
G306: Expect WriteFile permissions to be 0600 or less (gosec)
GoSec (via golangci-lint): internal/verda-cli/cmd/update/update_test.go#L175
G304: Potential file inclusion via variable (gosec)
All Security Checks Passed
Process completed with exit code 1.