taigrrSecurity: INT-A12 rate-limit and meter every MCP method incl. initialize/listen/resources/prompts; INT-A13 per-token subscriber slots; INT-A14 untrusted PR/CI content as delimited data, human-confirmed approve/merge, no merge automation from unconfirmed agent approvals; INT-A23 structural audit redaction; INT-A24 OAuth code/client/refresh sweeps in runMcpCron + live-refresh grant counting; INT-A30 session id in query only for WebSocket upgrade; INT-A34 agent tokens always expire; migration 0022
4a198ca ·
- ..
- api
- ci
- code
- editor
- events
- git
- integrations
- lfs
- mcp
- mergefix
- metering
- net
- notify
- pages
- security
- sites
- webhooks
- account-security.ts
- accounts.test.ts
- accounts.ts
- attachments.ts
- auth-tokens.ts
- auth.ts
- avatars.ts
- branch-pushes.test.ts
- branch-pushes.ts
- cbor.ts
- codeowners.ts
- collaborators.ts
- crypto.ts
- db.ts
- discussions.ts
- email.ts
- errors.ts
- github-oauth.ts
- issue-templates.ts
- issues.ts
- label-write.ts
- limits.ts
- markdown.ts
- merge-automation.ts
- merge-queue-do.ts
- merge-queue.ts
- notification-prefs.ts
- org-delete.test.ts
- org-delete.ts
- passkeys.ts
- people.ts
- planning.ts
- profiles.ts
- project-room.ts
- projects.ts
- protection-write.ts
- protection.ts
- pull-access.ts
- pull-automation.ts
- pull-create.ts
- pull-events.ts
- pull-files.ts
- pull-links.ts
- pull-merge.ts
- pull-rebase.ts
- pull-templates.ts
- pulls.ts
- raw.ts
- reactions.ts
- redirects.ts
- references.ts
- repo-ops.ts
- repo-provisioning.ts
- repos.ts
- review-requests.ts
- reviews-write.ts
- secrets.ts
- statuses.ts
- storage.ts
- suggestions.ts
- token-scope.ts
- token-write.ts
- totp.ts
- two-factor.ts
- webauthn.ts