taigrrSecurity: INT-A1 verify GitHub push permission before push mirroring; INT-A2/A33 MergeFix requires base write, trailers, no-CI needs human; INT-A3/A4 legacy webhooks via guarded outbound client with encrypted secrets; INT-A5/A25/A27 detach integrations on transfer/delete, prune orphans and logs; INT-A26 hide installer repo list; INT-A28/A29 streamed inbound cap, strip auth on cross-origin redirect; INT-A6/A7/A8/A20/A22/A32 editor container cap, preview hardening, symlink-safe sync, non-root image
f2e2275 ·
- ..
- account-security.ts
- account.ts
- action-config.ts
- actions.ts
- advisories.ts
- agents.ts
- artifacts-health.ts
- auth.ts
- billing.ts
- branch-pushes.ts
- browse.ts
- code.ts
- containers.ts
- deployments.ts
- discussion-admin.ts
- discussions.ts
- editor.ts
- git-write.ts
- hovercards.ts
- import-sync.ts
- integrations.ts
- issue-templates.ts
- issues.ts
- labels.ts
- lfs.ts
- login.ts
- markdown.ts
- mergefix.ts
- middleware.ts
- milestones.ts
- notification-settings.ts
- pages.ts
- planning.ts
- profile.ts
- projects.ts
- pull-review.ts
- pulls.ts
- reactions.ts
- releases.ts
- repos.ts
- reviews.ts
- runners.ts
- security.ts
- settings.ts
- signing-keys.ts
- sites.ts
- tokens.ts