Skip to content

Code Factory v0.18.0 — hosted enterprise PR assurance

Choose a tag to compare

View all tags
@zrk222 zrk222 released this 19 Jul 14:31
v0.18.0
b9df5fb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Code Factory 0.18.0 adds authenticated pull-request assurance and an optional self-hosted PostgreSQL/GitHub adapter.

Highlights:

  • GitHub HMAC webhook verification and durable replay rejection
  • Immutable installation-to-tenant routing with PostgreSQL forced RLS
  • Offline RS256 OIDC approval verification with replay protection
  • Transactional approval + GitHub Check outbox and short-lived App credentials
  • Freshness-bounded HTTPS JWKS rotation, health/readiness routes, and secret-free events
  • VS Code and JetBrains packages updated to 0.4.0

The hosted component is a deployable reference, not a managed HA, SCIM, SOC 2, or SLA claim. See CHANGELOG.md and docs/HOSTED_PR_ASSURANCE.md for the complete contract and evidence boundary.

Assets 23
Loading