Skip to content

Pin generated hook executable provenance - #4998

Merged
Widthdom merged 17 commits into
mainfrom
fix-issue4892
Jul 30, 2026
Merged

Pin generated hook executable provenance#4998
Widthdom merged 17 commits into
mainfrom
fix-issue4892

Conversation

@Widthdom

@Widthdom Widthdom commented Jul 30, 2026

Copy link
Copy Markdown
Owner

Summary

  • pin generated pre-commit hooks to the resolved cdidx executable and record a bounded provenance manifest
  • diagnose missing, moved, tampered, and version-skewed installations with support-safe output
  • document the executable provenance contract in the bilingual guides
  • add the bilingual changelog fragment at changelog.d/unreleased/4892.fixed.md

Testing

  • dotnet test tests/CodeIndex.Tests/CodeIndex.Tests.csproj -f net8.0 -p:UseSharedCompilation=false --no-restore (10,967 passed, 7 skipped)
  • dotnet test tests/CodeIndex.Tests/CodeIndex.Tests.csproj -f net9.0 -p:UseSharedCompilation=false --no-restore (10,493 passed, 420 skipped)
  • dotnet build CodeIndex.sln -c Release -p:UseSharedCompilation=false --no-restore
  • dotnet format CodeIndex.sln --verify-no-changes --no-restore
  • dotnet run --project tools/CodeIndex.Changelog -- check

Review

No blocking/actionable issues found.

Fixes #4892

@Widthdom
Widthdom marked this pull request as ready for review July 30, 2026 17:58
@Widthdom
Widthdom merged commit f40d4ff into main Jul 30, 2026
12 checks passed
@Widthdom
Widthdom deleted the fix-issue4892 branch July 30, 2026 17:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Pin or report the cdidx executable used by generated hooks

1 participant