Repository navigation

feat(rbac): protect Scorch, Builder, and Tunneler - #385

Draft

GhostofGoes wants to merge 9 commits into

sandialabs:mainfrom

GhostofGoes:feat-rbac-services

Commits on Sep 23, 2026
- feat(rbac): protect Scorch, Builder, and Tunneler
  
  GhostofGoes
  and
  Copilot
  committed
  ee8a75b
- fix(rbac): harden service RBAC for Scorch, Builder, and Tunneler
  
  GhostofGoes
  and
  claude
  committed
  bf9c62f
- feat(rbac): add Builder and Scorch roles and widen service access
  
  GhostofGoes
  and
  claude
  committed
  579d420
- fix(rbac): keep Image configs out of the Builder role
  
  GhostofGoes
  and
  claude
  committed
  4dbea6e
- feat(rbac): separate Scorch terminal writes and reject unknown user roles
  
  GhostofGoes
  and
  claude
  committed
  53eb7b7
- docs(skills): fix phenix API auth examples
  
  GhostofGoes
  and
  claude
  committed
  2320ae3
- fix(rbac): check config kind when workflows create configs
  
  GhostofGoes
  and
  claude
  committed
  2db52b3
- fix(lint): keep trigger handlers under funlen and drop unused nolint
  
  GhostofGoes
  and
  claude
  committed
  90aff0e
- fix(rbac): close VNC, logs, user secret, and token gaps
  
  GhostofGoes
  and
  claude
  committed
  de2c78e