Add coverage gate, CycloneDX SBOM, and release attestations#16

Merged

masarray merged 30 commits into

mainfrom

agent/coverage-sbom-provenance

Jul 12, 2026

Commits on Jul 12, 2026

Add pinned coverage collector
masarray
committed
Enable cross-platform test coverage collection
masarray
committed
Add deterministic coverage quality gate
masarray
committed
Fix coverage test argument assembly
masarray
committed
Add deterministic CycloneDX SBOM generator
masarray
committed
Fail CI and release builds on compiler warnings
masarray
committed
Add coverage evidence and warning gates to CI
masarray
committed
Enforce warning-free test compilation
masarray
committed
Require warning-free CodeQL build
masarray
committed
Add SBOM, pinned installer tool, and release attestations
masarray
committed
Document SBOM, provenance, and coverage gates
masarray
committed
Document coverage, SBOM, and release provenance
masarray
committed
Record coverage, SBOM, and provenance hardening
masarray
committed
Expand public release verification checklist
masarray
committed
Measure linked engine source in test assembly
masarray
committed
Add explicit Coverlet runsettings
masarray
committed
Use explicit coverage runsettings
masarray
committed
Use Coverlet MSBuild instrumentation
masarray
committed
Use Coverlet MSBuild instrumentation
masarray
committed
Collect coverage through MSBuild instrumentation
masarray
committed
Remove unused collector runsettings
masarray
committed
Keep exact Inno package pin without brittle file metadata gate
masarray
committed
Force linked engine test assembly instrumentation
masarray
committed
Raise verified coverage regression floor to 50 percent
masarray
committed
Enforce 50 percent line coverage floor
masarray
committed
Document verified 50 percent coverage floor
masarray
committed
Limit SBOM to shipped applications and stabilize output
masarray
committed
Document verified coverage and application-only SBOM
masarray
committed
Record verified coverage and application-only SBOM
masarray
committed
Reject test-only packages from release SBOM
masarray
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add coverage gate, CycloneDX SBOM, and release attestations#16

Add coverage gate, CycloneDX SBOM, and release attestations#16
masarray merged 30 commits into
mainfrom
agent/coverage-sbom-provenance

Commits on Jul 12, 2026

Add pinned coverage collector

Enable cross-platform test coverage collection

Add deterministic coverage quality gate

Fix coverage test argument assembly

Add deterministic CycloneDX SBOM generator

Fail CI and release builds on compiler warnings

Add coverage evidence and warning gates to CI

Enforce warning-free test compilation

Require warning-free CodeQL build

Add SBOM, pinned installer tool, and release attestations

Document SBOM, provenance, and coverage gates

Document coverage, SBOM, and release provenance

Record coverage, SBOM, and provenance hardening

Expand public release verification checklist

Measure linked engine source in test assembly

Add explicit Coverlet runsettings

Use explicit coverage runsettings

Use Coverlet MSBuild instrumentation

Use Coverlet MSBuild instrumentation

Collect coverage through MSBuild instrumentation

Remove unused collector runsettings

Keep exact Inno package pin without brittle file metadata gate

Force linked engine test assembly instrumentation

Raise verified coverage regression floor to 50 percent

Enforce 50 percent line coverage floor

Document verified 50 percent coverage floor

Limit SBOM to shipped applications and stabilize output

Document verified coverage and application-only SBOM

Record verified coverage and application-only SBOM

Reject test-only packages from release SBOM