Visitar URL original
chore: vouch for all existing contributors by ellie · Pull Request #3486 · atuinsh/atuin · GitHub
Skip to content

chore: vouch for all existing contributors - #3486

Merged
ellie merged 1 commit into
mainfrom
push-vpmkrryovwnp
May 14, 2026
Merged

ellie merged 1 commit into
mainfrom
push-vpmkrryovwnp

Conversation

@ellie

@ellie ellie commented May 14, 2026

Copy link
Copy Markdown
Member

Checks

  • I am happy for maintainers to push small adjustments to this PR, to speed up the review cycle
  • I have checked that there are no existing pull requests for the same thing

@greptile-apps

greptile-apps Bot commented May 14, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

This PR populates the Fossier vouch list for existing contributors. The main changes are:

  • Replaces the VOUCHED.td template comments with vouched GitHub usernames.
  • Removes the empty .fossier.db-wal file.

Confidence Score: 4/5

This is close, but the bot entries should be fixed before merging.

  • The vouch list now includes shared automation accounts.
  • Bot-authored PRs can receive trusted handling instead of normal Fossier review.
  • The deleted WAL file was empty, so that part looks safe.

VOUCHED.td

Security Review

  • Trust-boundary widening: VOUCHED.td vouches shared bot identities, which can let bot-authored PRs bypass Fossier review.

Important Files Changed

Filename Overview
VOUCHED.td Adds 278 vouched identities used by the Fossier PR review workflow.
.fossier.db-wal Deletes an empty SQLite WAL file.

Reviews (1): Last reviewed commit: "chore: vouch for all existing contributo..." | Re-trigger Greptile

@ellie
ellie merged commit 17bc8f4 into main May 14, 2026
26 checks passed
Comment thread VOUCHED.td
Comment on lines +55 to +85
+ dependabot[bot]
+ dhth
+ digital-cuttlefish
+ dongxuwang
+ dotfrag
+ dotsam
+ drbrain
+ drmorr0
+ ds-cbo
+ eatradish
+ eclairevoyant
+ edeustua
+ edwardloveall
+ ekroon
+ ellie
+ elsbrock
+ ElvishJerricco
+ enchantednatures
+ eopb
+ EricCrosson
+ eripa
+ etbyrd
+ eth3lbert
+ evanpurkhiser
+ felixonmars
+ filviu
+ fragmede
+ frankh
+ frukto
+ fzakaria
+ github-actions[bot]

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 security Bot identities auto-trusted

This adds dependabot[bot] and github-actions[bot] to the vouch list. Those are shared automation identities rather than repo-specific human contributors, so any PR authored by one of those bot accounts can be treated as vouched by Fossier and skip the spam review path. A compromised automation token or unwanted bot-authored PR would get the same trusted handling as a known contributor.

@ellie
ellie deleted the push-vpmkrryovwnp branch May 14, 2026 22:14
taylordotfish pushed a commit that referenced this pull request Jul 9, 2026
### Bug Fixes

- *(ai)* Dispatch skills registered in the slash command registry
([#3593](#3593))
- *(ci)* Fossier install in scan workflow
([#3485](#3485))
- *(i18n)* Fix typos in Russian localization
([#3575](#3575))
- *(nu)* Use `char -u 1b` for ESC in OSC 133 sequences
([#3530](#3530))
- *(nu)* Suppress error when `ATUIN_HISTORY_ID` is missing in
`pre_prompt` hook
([#3587](#3587))
- *(pi)* Observe tool events instead of registering a bash tool
([#3557](#3557))
- *(pty-proxy)* Set `$SHELL` to the spawned shell
([#3548](#3548))
- *(search)* Fix terminal clearing with latest Ratatui
([#3578](#3578))
- *(sync)* Skip records that fail to decrypt or decode instead of
failing the whole store
([#3569](#3569))
- Atuin hangs when attempting to spawn daemon from Ctrl+R invocation
([#3502](#3502))
- Capture session ID from stream headers rather than final event
([#3531](#3531))
- Doctor resiliency fo runknown platforms + openbsd warning
([#3551](#3551))
- Double input on arrow keys in AI setup prompt on Windows
([#3552](#3552))
- Exclude AI agent commands from zsh-autosuggestions
([#3567](#3567))
- Silence shellcheck SC2016 on literal `$all-user` author filter
- Respect `store_failed` when using daemon
([#3571](#3571))


### Documentation

- Highlight `Ctrl-r` keybinding on docs page
([#3489](#3489))
- Document store purge workflow
([#3544](#3544))
- Fix command example typo in documentation
([#3536](#3536))
- Make commented-out lines in `config.toml` match real defaults
([#3583](#3583))
- Add fish shell cleanup step to uninstall instructions
([#3582](#3582))


### Features

- *(doctor)* Add whether daemon is enabled to `doctor` output
([#3572](#3572))
- *(pty-proxy)* Add `--shell` flag to override the spawned shell
([#3327](#3327))
- Setup fossier to stop bot slop prs
([#3482](#3482))
- Capture command output + expose to new `atuin_output` tool
([#3510](#3510))
- Cache user contexts on load until `/reload`
([#3525](#3525))
- Create database integration tests for atuin-server
([#3514](#3514))
- Add `/model` slash command for changing models
([#3576](#3576))
- Add mcp server for history tools and expand search filters
([#3581](#3581))
- Add status bar with model and usage information
([#3591](#3591))


### Miscellaneous Tasks

- *(rustdoc)* Fix Rustdoc warnings
([#3585](#3585))
- *(warnings)* Fix compile warnings with latest dependencies
([#3586](#3586))
- Vouch for all existing contributors
([#3486](#3486))
- Update GitHub app token format
- Update to Rust 1.96.1
([#3568](#3568))
- Adopt `derive_more` to reduce boilerplate across the codebase
([#3573](#3573))


### Performance

- *(search)* Scan history by recency until N unique
([#3553](#3553))
- Add `synchronous(Normal)` + `optimize_on_close` to record store SQLite
([#3577](#3577))
- Remove unnecessary clones in a hot path
([#3580](#3580))


### Refactor

- Implement `From<sqlx::Error>` and clean up `fix_error`
([#3484](#3484))
- Pull `fn into_utc` into `atuin-server-database` crate
([#3487](#3487))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant