v0.1.0
ci-capsule v0.1.0
What it provides
- A read-only
pullpath for a failed GitHub Actions run. - Local evidence bundles with metadata-only artifact inventory.
- Bounded, best-effort evidence sanitization and a supported-pattern audit.
- Fail-closed static replay analysis: commands are candidates only when the literal workflow step and execution context are sufficiently simple to support that conclusion.
Supported release artifact
This draft contains a Linux amd64 archive, a CycloneDX 1.5 SBOM, and SHA-256 checksums.
Non-goals and limits
- This is not a GitHub Actions runner or command executor.
- A replay candidate is not proof of runner equivalence or successful reproduction.
- Artifact/cache contents, reruns, workflow dispatches, and uploads are out of scope.
- Redaction is best effort, not a guarantee that unknown secret formats or sensitive non-credential text are absent.