Repository navigation

[bug-fix] Harden persisted workflow run artifact access against symlinks - #4930

Open

github-actions[bot] wants to merge 8 commits into

mainfrom

fix/4914-persisted-run-symlinks-2a3452971b7ee167

Open

[bug-fix] Harden persisted workflow run artifact access against symlinks#4930
github-actions[bot] wants to merge 8 commits into
mainfrom
fix/4914-persisted-run-symlinks-2a3452971b7ee167

Commits on Oct 12, 2026
- Fix persisted-run-symlinks: reject symlinked workflow artifacts
  
  github-actions[bot]
  and
  Copilot
  authored
  1650af6
- Fix persisted workflow snapshot symlinks
  
  Copilot
  and
  mnriem
  authored
  79f1da7
- Secure workflow artifacts against run-directory swaps
  
  Copilot
  and
  mnriem
  authored
  bd3507f
- Support workflow persistence without dir-fd APIs
  
  Copilot
  and
  mnriem
  authored
  02159bf
Commits on Oct 13, 2026
- fix(workflows): address storage review findings and checkpoint tests
  
  mnriem
  and
  Copilot
  committed
  88dee95
- fix(workflows): cover portable storage race rejection in tests
  
  mnriem
  and
  Copilot
  committed
  f0743d6
- fix(workflows): anchor run storage access to project directory
  
  mnriem
  and
  Copilot
  committed
  446c4f1
- fix(workflows): preserve private permissions in portable storage
  
  mnriem
  and
  Copilot
  committed
  a7fdbd8