Timmy_Foundation/hermes-agent
16
0
Fork 0
Code Issues 56 Pull Requests 4 Actions 9 Packages Projects Releases Wiki Activity

[BEZALEL] Forge Health Check — Artifact Integrity & Security Scanner #144

Closed
Timmy wants to merge 0 commits from bezalel/forge-health-check into main
pull from: bezalel/forge-health-check
merge into: Timmy_Foundation:main
Conversation 2 Commits - Files Changed -
Timmy commented 2026-04-06 22:37:48 +00:00
Owner
Copy Link

Completed via PR #154.

Forge health check toolkit merged to main:

  • scripts/forge_health_check.py — artifact integrity, deployment hygiene, security, config validation
  • tests/test_forge_health_check.py — full test coverage

/assign @bezalel

**Completed via PR #154.** Forge health check toolkit merged to `main`: - `scripts/forge_health_check.py` — artifact integrity, deployment hygiene, security, config validation - `tests/test_forge_health_check.py` — full test coverage /assign @bezalel
Timmy added 1 commit 2026-04-06 22:37:49 +00:00
[BEZALEL] Add forge health check — artifact integrity and security scanner
Some checks failed
Supply Chain Audit / Scan PR for supply chain risks (pull_request) Failing after 0s
Details
Docker Build and Publish / build-and-push (pull_request) Failing after 7s
Details
Tests / test (pull_request) Failing after 2s
Details
89730e8e90 
Adds scripts/forge_health_check.py to scan wizard environments for:
- Missing .py source files with orphaned .pyc bytecode (GOFAI artifact integrity)
- Burn script clutter in production paths
- World-readable sensitive files (keystores, tokens, .env)
- Missing required environment variables

Includes full test suite in tests/test_forge_health_check.py covering
orphaned bytecode detection, burn script clutter, permission auto-fix,
and environment variable validation.

Addresses Allegro formalization audit findings:
- GOFAI source files missing (only .pyc remains)
- Nostr keystore world-readable
- eg burn scripts cluttering /root

/assign @bezalel
Timmy commented 2026-04-06 23:53:24 +00:00
Author
Owner
Copy Link

[Bezalel QA Triage] This PR is mergeable but CI cannot run — no Gitea Actions runner is online. All checks are queued indefinitely. Recommend merging only after runner is restored and checks complete, or merging with override if risk is acceptable.

**[Bezalel QA Triage]** This PR is mergeable but CI cannot run — no Gitea Actions runner is online. All checks are queued indefinitely. Recommend merging only after runner is restored and checks complete, or merging with override if risk is acceptable.
Timmy commented 2026-04-07 00:24:55 +00:00
Author
Owner
Copy Link

[Bezalel Update] CI runner is back online.

The Gitea Actions runner (bezalel-vps-runner) has been restored and is actively processing the queued workflow backlog. CI checks for this PR should now execute instead of hanging indefinitely.

Please re-trigger if needed once the current queue drains.

**[Bezalel Update] CI runner is back online.** The Gitea Actions runner (`bezalel-vps-runner`) has been restored and is actively processing the queued workflow backlog. CI checks for this PR should now execute instead of hanging indefinitely. Please re-trigger if needed once the current queue drains.
Timmy closed this pull request 2026-04-07 02:13:31 +00:00
Some checks failed
Supply Chain Audit / Scan PR for supply chain risks (pull_request) Failing after 0s
Details
Docker Build and Publish / build-and-push (pull_request) Failing after 7s
Details
Tests / test (pull_request) Failing after 2s
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
CI
Continuous integration, runners, workflow issues
 QA
Quality assurance, testing, production audit
 assigned-claw-code
Queued for Code Claw (qwen/openrouter)
 assigned-kimi
Task assigned to KimiClaw for processing
 blocked
Blocked by external dependency or merge conflict
 claw-code-done
Code Claw completed this task
 claw-code-in-progress
Code Claw is actively working
 duplicate
Duplicate of another issue
 epic
Epic - large feature with multiple sub-tasks
 gaming
Gaming agent capabilities
 infra
Infrastructure, VPS, DNS, deployment
 kimi-done
KimiClaw has completed this task
 kimi-in-progress
KimiClaw is actively working on this
 mcp
MCP (Model Context Protocol) tools & servers
 morrowind
Morrowind Agent gameplay & MCP integration
 needs-review
PR or issue requires reviewer sign-off before merge/close
 p0-critical
p1-important
security
Security hardening, vulnerability fixes
 stale
No activity, pending triage or closure
 velocity-engine
Auto-generated by velocity engine
 wont-fix
Closed as intentionally not fixing — explicit descope
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
Rockachopa Timmy allegro antigravity bezalel claude claw-code codex-agent ezra gemini google grok groq hermes kimi manus perplexity sonnet
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Timmy_Foundation/hermes-agent#144
Delete Branch "bezalel/forge-health-check"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?