taigrrSecurity: INT-A12 rate-limit and meter every MCP method incl. initialize/listen/resources/prompts; INT-A13 per-token subscriber slots; INT-A14 untrusted PR/CI content as delimited data, human-confirmed approve/merge, no merge automation from unconfirmed agent approvals; INT-A23 structural audit redaction; INT-A24 OAuth code/client/refresh sweeps in runMcpCron + live-refresh grant counting; INT-A30 session id in query only for WebSocket upgrade; INT-A34 agent tokens always expire; migration 0022
4a198ca ·
- ..
- advisories.ts
- api.ts
- code-scanning.ts
- commit-signature.ts
- dependencies.ts
- detectors.test.ts
- detectors.ts
- manifests-json.ts
- manifests-text.test.ts
- manifests-text.ts
- manifests.ts
- openpgp-keys.ts
- openpgp.ts
- policy.ts
- push-protection.ts
- queue.ts
- sarif.test.ts
- sarif.ts
- secret-alerts.ts
- secret-scan.ts
- settings.ts
- signatures.ts
- sshsig.ts