Commit history for src/server/token-scope.ts
a360a78⌁
- Cap every non-push-token credential at read on unclaimed scratch repos, site admins and deploy tokens included, so LFS, contents API and web writes follow the git proxy guard459f46f⌁taigrr committed
- Merge roadmap/mcp9cc32b3⌁taigrr committed
- Merge roadmap/mcp0835f93⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed