Repository navigation

Add coverage gate, CycloneDX SBOM, and release attestations - #16

Merged

masarray merged 30 commits into

mainfrom

agent/coverage-sbom-provenance

Jul 12, 2026

Merged

Add coverage gate, CycloneDX SBOM, and release attestations#16
masarray merged 30 commits into
mainfrom
agent/coverage-sbom-provenance

Commits on Jul 12, 2026
- Add pinned coverage collector
  masarray
  committed
  a4fcc45
- Enable cross-platform test coverage collection
  masarray
  committed
  25abab6
- Add deterministic coverage quality gate
  masarray
  committed
  67f6a4f
- Fix coverage test argument assembly
  masarray
  committed
  a53970b
- Add deterministic CycloneDX SBOM generator
  masarray
  committed
  89528e1
- Fail CI and release builds on compiler warnings
  masarray
  committed
  8cb189b
- Add coverage evidence and warning gates to CI
  masarray
  committed
  3d27337
- Enforce warning-free test compilation
  masarray
  committed
  9d3e190
- Require warning-free CodeQL build
  masarray
  committed
  06b4a2b
- Add SBOM, pinned installer tool, and release attestations
  masarray
  committed
  7cdb630
- Document SBOM, provenance, and coverage gates
  masarray
  committed
  4757885
- Document coverage, SBOM, and release provenance
  masarray
  committed
  d0e077c
- Record coverage, SBOM, and provenance hardening
  masarray
  committed
  413e69e
- Expand public release verification checklist
  masarray
  committed
  0dc2641
- Measure linked engine source in test assembly
  masarray
  committed
  705fe20
- Add explicit Coverlet runsettings
  masarray
  committed
  a3e0da9
- Use explicit coverage runsettings
  masarray
  committed
  b0eb794
- Use Coverlet MSBuild instrumentation
  masarray
  committed
  52925cb
- Use Coverlet MSBuild instrumentation
  masarray
  committed
  59f3a3b
- Collect coverage through MSBuild instrumentation
  masarray
  committed
  3f0a05c
- Remove unused collector runsettings
  masarray
  committed
  15eccaa
- Keep exact Inno package pin without brittle file metadata gate
  masarray
  committed
  5a70ac1
- Force linked engine test assembly instrumentation
  masarray
  committed
  cd86d58
- Raise verified coverage regression floor to 50 percent
  masarray
  committed
  e0e2e69
- Enforce 50 percent line coverage floor
  masarray
  committed
  44d6ce9
- Document verified 50 percent coverage floor
  masarray
  committed
  62d4e85
- Limit SBOM to shipped applications and stabilize output
  masarray
  committed
  3e52fa9
- Document verified coverage and application-only SBOM
  masarray
  committed
  ceb5f3c
- Record verified coverage and application-only SBOM
  masarray
  committed
  f3dbe9f
- Reject test-only packages from release SBOM
  masarray
  committed
  18f9455

Commits

Commits on Jul 12, 2026