Skip to content

Een waakhond blaft niet #470

Description

@github-actions

2 guards are not running.

heartbeat.yml - the hourly proof that a file still transfers and a document still signs

  • RED: the switch is off: repository variable HEARTBEAT_ENABLED is not "true", so every scheduled run of heartbeat.yml skips the job "heartbeat - production". A skipped job is grey, not red, and notifies nobody. The last 25 scheduled runs have been skipped.
  • RED: no scheduled run of "heartbeat - production" has succeeded in the last 25 scheduled runs (most recent conclusion: skipped). the hourly proof that a file still transfers and a document still signs is not being proved by anything.
  • to turn it on: gh secret set PARAMANT_CANARY_KEY && gh secret set PARASIGN_CANARY_KEY && gh variable set HEARTBEAT_ENABLED --body true

security-posture.yml - the nightly scan of the public surface: DNS, TLS, headers and the closed ParaID route

  • RED: the switch is off: repository variable SECURITY_POSTURE_ENABLED is not "true", so every scheduled run of security-posture.yml skips the job "security posture, production". A skipped job is grey, not red, and notifies nobody.
  • RED: no scheduled run of "security posture, production" has succeeded in the last 4 scheduled runs (most recent conclusion: skipped). the nightly scan of the public surface: DNS, TLS, headers and the closed ParaID route is not being proved by anything.
  • to turn it on: gh variable set SECURITY_POSTURE_ENABLED --body true

A guard that cannot fire is worse than no guard, because it produces calm.
This issue stays open, and is updated once a day, until every guard above is running.

Run: https://github.com/Apolloccrypt/paramant-relay/actions/runs/34030779709

2026-09-06T11:37:37.869Z

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions