Skip to content

[pull] master from njaremko:master#6

Open
pull[bot] wants to merge 5 commits into
WiresmithTech:masterfrom
njaremko:master
Open

[pull] master from njaremko:master#6
pull[bot] wants to merge 5 commits into
WiresmithTech:masterfrom
njaremko:master

Conversation

@pull

@pull pull Bot commented Jun 17, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

maxammann and others added 5 commits June 17, 2026 15:25
Port dev shell to devenv and fix xmlsec transforms

- Add devenv shell wiring around the shared Nix build environment
- Use generic xmlsec transform getters exposed by dynamic backend headers
- Treat assertion-only ValidateAndMark output as a verified assertion shell

Remove direnv

Harden SAML response fallback and align Nix docs

Require namespace-aware SAML roots and strict verified Response shell extraction. Preserve inherited namespaces during xmlsec child-root reduction. Replace standalone devenv locks/docs with the flake.lock environment story.

Ignore .tmp

Fix devenv

Harden signature algorithm allowlist validation

Reject signed references whose DigestMethod hash is outside the configured allowlist, make multi-reference pre-digest selection deterministic, and cover both behaviors with regressions.
add feature to allow only certain algorithms
Trust the repository flake config in CI and run flake checks with impure evaluation so devenv can resolve the project root for devShell outputs.
@pull pull Bot locked and limited conversation to collaborators Jun 17, 2026
@pull pull Bot added the ⤵️ pull label Jun 17, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants