Commit history for src/server/security
- Security: INT-A9/A10 linear secret detectors and TOML comment stripping; INT-A11/A16/A31 SARIF run cap, verified ref/commit, no fixed-marking from empty uploads, bounded strings; INT-A17 single-use bypass window; AZ-A4 admin-only alert resolutions9d63512⌁taigrr committed
- Merge roadmap/notify7417d6f⌁taigrr committed
- Merge roadmap/platformfixa662571⌁taigrr committed
- Scope commit signature lookups to the repository, 404 on missing alerts, gate draft release assets, refuse private webhook targets, stop dequeued merges, report workflow compile failures, support git protocol v2 with the default branch as HEAD, and post every password form.20aff54⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
7f485b4⌁
- Merge roadmap/security: signatures, secret scanning, code scanning, advisories, dependency graphbad844a⌁taigrr committed