[workflow-audit] 3 unexplained change(s) on 2026-09-19

Open
#704 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
25/100
Issue type
Bug
Clarity
Needs clarification
Activity status
Active
Tech stack
github-actions
Domain
ci-cd, security

Research direction

Start with the workflow-audit run summary and inspect commits 3ad55ff, c63b312, and e5a1582 in the listed files, especially .github/audit/_preamble.md, .github/audit/orchestrator.md, and .github/workflows/security-audit.yaml. Account for each reported change and confirm the audit no longer flags unexplained commits.

Written by the indexing model from the issue text.

Description

3 unexplained commit(s) in the audit window (.github/workflows/ .config/tend.yaml .github/audit/ .vscode/) since 2026-09-18T12:11:52Z.

Routine Renovate pin bumps and reproducible tend regenerations are
classified and omitted — see the run summary for what was skipped.
Everything below needs a human to account for it.

3ad55ff — Address review: anchor the delegate deadline to the caller's own
  • Author: dormouse-bot 287024035+dormouse-bot@users.noreply.github.com (self-declared; not proof of origin)
  • Date: 2026-09-18 13:57:49 +0000
  • Refs: remotes/origin/daily/review-runs-35344301870
  • Files:
    • .github/audit/_preamble.md
  • View diff
c63b312 — Tell a delegating audit domain to block, not end its turn
  • Author: dormouse-bot 287024035+dormouse-bot@users.noreply.github.com (self-declared; not proof of origin)
  • Date: 2026-09-18 12:37:30 +0000
  • Refs: remotes/origin/daily/review-runs-35344301870
  • Files:
    • .github/audit/_preamble.md
    • .github/audit/orchestrator.md
  • View diff
e5a1582 — Address review: bound the delegate wait, and align the third placeholder
  • Author: dormouse-bot 287024035+dormouse-bot@users.noreply.github.com (self-declared; not proof of origin)
  • Date: 2026-09-18 12:48:58 +0000
  • Refs: remotes/origin/daily/review-runs-35344301870
  • Files:
    • .github/audit/_preamble.md
    • .github/workflows/security-audit.yaml
  • View diff
Dominant language
TypeScript
Stars
5
Forks
1
Avg merge
18h 26m
Merged PRs (30d)
229

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from diffplug/dormouse

All issues in diffplug/dormouse

Similar issues

More TypeScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.