ci: sandbox the opencode agent with system policies and pin the cli

0b06adc

Select commit

Loading

Failed to load commit list.

There was an error while loading. Please reload this page.

Dependabot auto-merge on: pull_request_target 1

auto-merge

CI on: pull_request 1

Commitlint

Release Please

Build and attach marketplace

Render and attach the release video

Build and attach per-tool distribution

Build and attach plugin

Publish cli

Publish the release

Recap the release

Validate on: pull_request 1

lefthook (framework-local checks)

CodeQL on: pull_request 1

Analyze (javascript-typescript)

cli CI on: pull_request 2

cli / changes

cli / Typecheck

cli / Lint

cli / Architecture invariants

cli / Test & Coverage thresholds

cli / Smoke

cli / Kilo runtime smoke

cli / Build & Bundle Budget

cli / Knip (dead code)

cli / Identifier join (Claude Code)

cli / Tokens end to end (Claude Code, ${{ matrix.os }})

cli / JSCPD (duplication)

kanban / Typecheck, Lint & Test

cli / Windows

cli / macOS

cli / Mutation (${{ matrix.scope }})

cli / gate

Code scanning results

CodeQL