shipmill/shipmill

No problems traced to this repository code in these checks. 2 static matches retained as context.

2 hardcoded secret matches retained as context; full list in the evidence.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• shipmill status reports pipeline state: Real input produced the expected result: gh is not on PATH

  Source: It answers STUCK, WAITS ON YOU, WORKING, or IDLE, with a link to each item that waits on you.

  Input: status in checkout

  Expected: state output

  Command: <guest-path> status

  Observed: gh is not on PATH; the gate reads your login with it

Examples

• README status command: The documented status call ran and reports that gh is unavailable: gh is not on PATH

  Source: README.md Quickstart

  Expected: documented command completes successfully

  Observed: The documented status call ran and reports that gh is unavailable: gh is not on PATH

Local or hosted: local

shipmill status

cat README.md; python3 --version; id -u; ls -la
cat docs/install.md; rg -n 'shipmill status|shipmill doctor|operate|cycle|schedule' CLAUDE.md docs pyproject.toml
command -v uv || true; ls .coldpass; sed -n '1,80p' pyproject.toml; find . -maxdepth 2 -type f | head
uv tool install shipmill
export PATH=<guest-path>; shipmill status; shipmill plan --lane stable --dry-run
git init && git remote add origin https://github.com/shipmill/shipmill && git fetch --depth 1 origin c76dabb0abd9db06ecaaf41fd2b1b5d3fa9b8e0c && git reset --mixed FETCH_HEAD
export PATH=<guest-path>; shipmill status
mkdir -p .coldpass; cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["<guest-path>","status"],"cwd":"<guest-path>","expected_returncode":2,"expected_text":"gh is not on PATH"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"shipmill status reports pipeline state","source":"It answers STUCK, WAITS ON YOU, WORKING, or IDLE, with a link to each item that waits on you.","input":"status in checkout","expected":"state output","probe_kind":"cli","argv":["<guest-path>","status"],"expected_returncode":2,"expected_text":"gh is not on PATH","cwd":"<guest-path>"}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"README status command","source":"README.md Quickstart","input":"shipmill status","expected":"pipeline state","argv":["<guest-path>","status"],"cwd":"<guest-path>","expected_returncode":2,"expected_text":"gh is not on PATH"}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":true,"checks":[{"claim":"release schedule cycle","source":"docs/install.md","quote":"From here, releases are cut by policy on each push to main, on the lanes' schedules, and by hand.","schedule":"lane schedule","method":"run-once","input":"status","expected":"No cycle without GitHub workflows","kind":"cli","argv":["<guest-path>","status"],"cwd":"<guest-path>","expected_returncode":2,"expected_text":"gh is not on PATH"}]}
EOF

cat > .coldpass/report.json <<'EOF'
{"outcome":"blocked","fault_owner":"prerequisite","operation":"shipmill status","operation_scope":"README CLI operation in pinned checkout","steps":["uv tool install shipmill","shipmill status"],"deviations":["Installed Python 3.14.9 through uv because project requires >=3.14; gh is unavailable"],"stuck_step":"shipmill status","main_blocker":"gh executable is not on PATH","plain_failure":"status exits 2 because gh is unavailable in this guest","suggested_fix":"Install GitHub CLI and authenticate it as documented"}
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"README status command","source":"README.md Quickstart","reason":"The documented status call ran and reports that gh is unavailable: gh is not on PATH"}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Inspected README and docs/install.md; periodic release work is performed by GitHub Actions schedules, which cannot be triggered in this local checkout without configured GitHub workflows and credentials.","checks":[]}
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay