Skip to content

Harden Cloud Run execution endpoints - #292

Merged
Pigbibi merged 1 commit into
mainfrom
codex/g14-post-only-runtime-20260902
Sep 1, 2026
Merged

Pigbibi merged 1 commit into
mainfrom
codex/g14-post-only-runtime-20260902

Conversation

@Pigbibi

@Pigbibi Pigbibi commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

Summary

  • make /run and /probe POST-only while preserving explicit runtime gates
  • configure the main Cloud Scheduler job to use authenticated POST requests
  • keep Cloud Run private with internal ingress, one instance, and concurrency 1
  • add regression tests for HTTP routing and workflow boundaries

Verification

  • uv run --no-sync python -m pytest -q — 269 passed, 1 third-party deprecation warning
  • uv run --no-sync ruff check --exclude external .
  • uv pip check
  • uv lock --check
  • actionlint .github/workflows/sync-cloud-run-env.yml
  • git diff --check

No live broker/provider calls, deploys, workflow dispatches, or cloud writes were performed.

Co-Authored-By: Codex <noreply@openai.com>
@Pigbibi
Pigbibi merged commit 3c3ebbc into main Sep 1, 2026
1 check passed
@Pigbibi
Pigbibi deleted the codex/g14-post-only-runtime-20260902 branch September 1, 2026 22:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant