6 Commits

Author	SHA1	Message	Date
Teknium	ac5b8a478a	ci: add supply chain audit workflow for PR scanning (#2816) ... Scans every PR diff for patterns associated with supply chain attacks: CRITICAL (blocks merge): - .pth files (auto-execute on Python startup — litellm attack vector) - base64 decode + exec/eval combo (obfuscated payload execution) - subprocess with encoded/obfuscated commands WARNING (comment only, no block): - base64 encode/decode alone (legitimate uses: images, JWT, etc.) - exec/eval alone - Outbound POST/PUT requests - setup.py/sitecustomize.py/usercustomize.py changes - marshal.loads/pickle.loads/compile() Posts a detailed comment on the PR with matched lines and context. Excludes lockfiles (uv.lock, package-lock.json) from scanning. Motivated by the litellm 1.82.7/1.82.8 credential stealer attack (BerriAI/litellm#24512).	2026-03-24 08:56:04 -07:00
teknium1	259208bfe4	docs: stabilize website diagrams	2026-03-14 22:49:57 -07:00
Brooklyn Nicholson	0d96f1991c	test: parallelize test suite with pytest-xdist ... ~2min sequential runs were painful. Added pytest-xdist and -n auto to run across all available cores. Tests already isolate state via tmp_path fixtures so no changes needed to test code. Local: 2677 passed in ~30s. CI gets 4 vCPUs on ubuntu-latest.	2026-03-09 20:47:34 -05:00
teknium1	d92266d7c0	ci: pin tests to Python 3.11 only ... The installer hardcodes PYTHON_VERSION=3.11 and creates the venv with that version. No point testing 3.12 — halves CI time.	2026-03-05 07:55:01 -08:00
teknium1	56dc9277d7	ci: add test workflow for PRs and main branch ... Run pytest on Python 3.11 + 3.12 for every PR and push to main. - Uses uv for fast dependency installation - Excludes integration tests (need real API keys/services) - Blanks API keys as safety net against accidental real API calls - Concurrency: cancels in-progress runs when new commits are pushed - 10 minute timeout (tests take ~77s) - fail-fast disabled so both Python versions run independently GitHub's default 'require approval for first-time contributors' means maintainers approve CI before it runs on new contributors' PRs, preventing abuse of CI resources.	2026-03-05 07:29:16 -08:00
teknium1	ada3713e77	feat: add documentation website (Docusaurus) ... - 25 documentation pages covering Getting Started, User Guide, Developer Guide, and Reference - Docusaurus with custom amber/gold theme matching the landing page branding - GitHub Actions workflow to deploy landing page + docs to GitHub Pages - Landing page at root, docs at /docs/ on hermes-agent.nousresearch.com - Content extracted and restructured from existing repo docs (README, AGENTS.md, CONTRIBUTING.md, docs/) - Auto-deploy on push to main when website/ or landingpage/ changes	2026-03-05 05:24:55 -08:00