taigrrSecurity: INT-A1 verify GitHub push permission before push mirroring; INT-A2/A33 MergeFix requires base write, trailers, no-CI needs human; INT-A3/A4 legacy webhooks via guarded outbound client with encrypted secrets; INT-A5/A25/A27 detach integrations on transfer/delete, prune orphans and logs; INT-A26 hide installer repo list; INT-A28/A29 streamed inbound cap, strip auth on cross-origin redirect; INT-A6/A7/A8/A20/A22/A32 editor container cap, preview hardening, symlink-safe sync, non-root image
f2e2275 ·
- ..
- use-action.ts
- use-attachment-upload.ts
- use-avatar-upload.ts
- use-branch-push-suggestions.ts
- use-commit-signatures.ts
- use-dismiss.ts
- use-editor-hotkey.ts
- use-fuzzy-finder.ts
- use-hovercards.ts
- use-job-log.ts
- use-last-commits.ts
- use-markdown-preview.ts
- use-optimistic-mutation.ts
- use-passkey.ts
- use-poll-while.ts
- use-project-live.ts
- use-pull-code-alerts.ts
- use-pull.ts
- use-repo.ts
- use-review-draft.ts
- use-suggestion-batch.ts
- use-thread-subscription.ts
- use-viewer.ts