Commit history for src/server/security/code-scanning.ts
- Security: INT-A9/A10 linear secret detectors and TOML comment stripping; INT-A11/A16/A31 SARIF run cap, verified ref/commit, no fixed-marking from empty uploads, bounded strings; INT-A17 single-use bypass window; AZ-A4 admin-only alert resolutions9d63512⌁taigrr committed
- Merge roadmap/notify7417d6f⌁taigrr committed
- Scope commit signature lookups to the repository, 404 on missing alerts, gate draft release assets, refuse private webhook targets, stop dequeued merges, report workflow compile failures, support git protocol v2 with the default branch as HEAD, and post every password form.20aff54⌁taigrr committed
- Merge roadmap/security: signatures, secret scanning, code scanning, advisories, dependency graphbad844a⌁taigrr committed
