feat(cli): explode archive materials in chainloop att add#3254

Merged

javirln merged 23 commits into

mainfrom

Jul 11, 2026

Commits on Jul 11, 2026

docs: add archive explode implementation plan
javirln
committed
feat(cli): detect archive materials for att add explode path
javirln
committed
feat(cli): walk archive entries with zip-bomb and traversal guards
javirln
committed
fix(cli): reject absolute and traversal paths in archive walk
javirln
committed
feat(cli): add archive-native allowlist and entry name allocation
javirln
committed
refactor(crafter): split material crafting from state persistence
javirln
committed
feat(crafter): add AddMaterialsFromArchive for atomic archive expansion
javirln
committed
fix(crafter): roll back policy evaluations and name temp files by entry on archive expand
javirln
committed
feat(cli): route att add to archive explode path
javirln
committed
feat(cli): add archive extraction guard flags and multi-material output
javirln
committed
test(crafter): cover archive explode behavior; regen CLI docs
javirln
committed
fix(crafter): export ErrUnsafeEntry sentinel and assert it in archive tests
javirln
committed
fix(cli): correct archive detection for non-file values and tighten guards
javirln
committed
fix(cli): address archive-explode code review findings
javirln
committed
fix(cli): address archive-explode review comments
javirln
committed
fix(crafter): treat ENOTDIR as a non-archive in detectByMagic
javirln
committed
fix(crafter): derive archive entry basename with OS-independent semantics
javirln
committed
feat(crafter): name exploded archive materials sequentially
javirln
committed
feat(crafter): use 0-indexed sequential names for exploded materials
javirln
committed
style(crafter): extract defaultMaterialName constant
javirln
committed
test(crafter): rename test var shadowing builtin real
javirln
committed
refactor(cli): simplify archive-explode output and routing
javirln
committed
feat(cli): limit archive explode to an SBOM/SARIF allowlist
javirln
committed