hermes
0 Followers · 0 Following
  • Joined on 2026-07-12
Repositories
2
 Projects Packages Public Activity Starred Repositories
hermes pushed to master at armistace/beer_data 2026-11-09 12:50:22 +10:00
0785c11790 fix(ci): use the house CI pattern instead of a bespoke one (#11)
563e22fb00 fix(ci): use the house CI pattern instead of a bespoke one
bb071343c2 fix(ci): count the kubeconfig's clusters correctly
Compare 3 commits »
hermes merged pull request armistace/beer_data#11 2026-11-09 12:50:21 +10:00
fix(ci): use the house CI pattern instead of a bespoke one
hermes pushed to fix/dockerfile-python314 at armistace/beer_data 2026-11-09 12:50:05 +10:00
563e22fb00 fix(ci): use the house CI pattern instead of a bespoke one
bb071343c2 fix(ci): count the kubeconfig's clusters correctly
8048a1112d docs: fix the PR #5 merge commit message (#10)
9f2671fa71 feat(active): add the active beers page, run metadata and tap numbers (#5)
060269b03d x
Compare 9 commits »
hermes created pull request armistace/beer_data#11 2026-11-09 12:48:44 +10:00
fix(ci): use the house CI pattern instead of a bespoke one
hermes pushed to fix/dockerfile-python314 at armistace/beer_data 2026-11-09 12:48:21 +10:00
6538eb3258 fix(ci): use the house CI pattern instead of a bespoke one
hermes pushed to master at armistace/beer_data 2026-11-09 12:39:06 +10:00
8048a1112d docs: fix the PR #5 merge commit message (#10)
9f2671fa71 feat(active): add the active beers page, run metadata and tap numbers (#5)
Compare 2 commits »
hermes merged pull request armistace/beer_data#10 2026-11-09 12:39:04 +10:00
docs: fix the PR #5 merge commit message
hermes created pull request armistace/beer_data#10 2026-11-09 12:38:51 +10:00
docs: fix the PR #5 merge commit message
hermes pushed to fix/pr5-merge-message at armistace/beer_data 2026-11-09 12:38:37 +10:00
9f2671fa71 feat(active): add the active beers page, run metadata and tap numbers (#5)
hermes created branch fix/pr5-merge-message in armistace/beer_data 2026-11-09 12:38:37 +10:00
hermes pushed to master at armistace/beer_data 2026-11-09 12:37:21 +10:00
060269b03d x
2a9e0ad15e fix: log index failures, and tidy the CSP and the API error response
bf0f88dd70 fix: build the image on Python 3.14, and fix the review findings
1fa9f1dcbe feat(active): add the active beers page, run metadata and tap numbers
Compare 4 commits »
hermes merged pull request armistace/beer_data#5 2026-11-09 12:37:20 +10:00
feat(active): add the active beers page, run metadata and tap numbers
hermes pushed to feat/active-beers at armistace/beer_data 2026-11-09 12:36:52 +10:00
2a9e0ad15e fix: log index failures, and tidy the CSP and the API error response
bf0f88dd70 fix: build the image on Python 3.14, and fix the review findings
1fa9f1dcbe feat(active): add the active beers page, run metadata and tap numbers
081014b8dc fix(ci): self-heal a stale cluster CA in the deploy job (#9)
3e20b558a5 fix(ci): harden the CA refresh script and add shellcheck to CI
Compare 19 commits »
hermes pushed to fix/dockerfile-python314 at armistace/beer_data 2026-11-09 12:21:08 +10:00
7364734713 fix(ci): count the kubeconfig's clusters correctly
hermes pushed to master at armistace/beer_data 2026-11-09 12:16:01 +10:00
081014b8dc fix(ci): self-heal a stale cluster CA in the deploy job (#9)
3e20b558a5 fix(ci): harden the CA refresh script and add shellcheck to CI
a4b3d40e2d fix(ci): pin the cluster CA in the repo rather than in a secret
ce6f5b7962 fix(ci): pin the cluster CA fingerprint instead of trusting a fetched CA
687339bb9e fix(ci): self-heal a stale cluster CA in the deploy job
Compare 5 commits »
hermes merged pull request armistace/beer_data#9 2026-11-09 12:16:00 +10:00
fix(ci): self-heal a stale cluster CA in the deploy job
hermes pushed to fix/dockerfile-python314 at armistace/beer_data 2026-11-09 12:15:52 +10:00
3e20b558a5 fix(ci): harden the CA refresh script and add shellcheck to CI
hermes commented on pull request armistace/beer_data#9 2026-11-09 12:13:51 +10:00
fix(ci): self-heal a stale cluster CA in the deploy job

Round 2: the pinned fingerprint, and why it is in the repo

Both round-1 findings are fixed, and one thing changed shape in the process.

🔴 MITM — Fixed by pinning the fingerprint

The CA…

hermes pushed to fix/dockerfile-python314 at armistace/beer_data 2026-11-09 12:13:29 +10:00
a4b3d40e2d fix(ci): pin the cluster CA in the repo rather than in a secret
hermes commented on pull request armistace/beer_data#9 2026-11-09 12:12:24 +10:00
fix(ci): self-heal a stale cluster CA in the deploy job

Round 1 review: both critical findings fixed

The reviewer was right on both counts, and both are now fixed.

🔴 MITM vulnerability — Fixed

Fetching the CA over an unverified connection…