fix: Replace regex command tokenization with shell execution#21

Merged

colek42 merged 14 commits intomainfrom

fix/command-parsing-shell-execution

Oct 21, 2025

Commits on Oct 21, 2025

fix: Replace regex command tokenization with shell execution

cole-rgb
and
claude
committed
fix: Use direct witness installation instead of non-existent action version
cole-rgb
committed
fix: Use specific witness version v0.8.2 for reliable download
cole-rgb
committed
fix: Use go install for witness (no binaries published after v0.1.x)
cole-rgb
committed
fix: Correct go install path to github.com/in-toto/witness
cole-rgb
committed
feat: Add validation to throw error if step parameter is missing
cole-rgb
committed
Download witness from official GitHub releases

cole-rgb
and
claude
committed
fix: Properly detect and use witness from PATH before downloading

cole-rgb
and
claude
committed
fix: Remove hardcoded default version in action.yml

cole-rgb
and
claude
committed
fix: Check .predicate.name instead of .predicate.step in CI tests

cole-rgb
and
claude
committed
docs: Add CLAUDE.md with critical findings and TDD workflow

cole-rgb
and
claude
committed
Fix CI test failures and document witness CLI limitations

cole-rgb
and
claude
committed
Fix policy validation test: add required --artifactfile flag

cole-rgb
and
claude
committed
Fix policy validation test with correct witness policy format

cole-rgb
and
claude
committed