taigrrSecurity: INT-A1 verify GitHub push permission before push mirroring; INT-A2/A33 MergeFix requires base write, trailers, no-CI needs human; INT-A3/A4 legacy webhooks via guarded outbound client with encrypted secrets; INT-A5/A25/A27 detach integrations on transfer/delete, prune orphans and logs; INT-A26 hide installer repo list; INT-A28/A29 streamed inbound cap, strip auth on cross-origin redirect; INT-A6/A7/A8/A20/A22/A32 editor container cap, preview hardening, symlink-safe sync, non-root image
f2e2275 ·
- ..
- advertise-filter.ts
- artifacts-call.ts
- artifacts-health.ts
- artifacts.ts
- commit-graph.ts
- diff.ts
- force-push.ts
- hidden-refs.ts
- history.ts
- inflate.ts
- merge.ts
- merge3.ts
- objects.ts
- pack.ts
- pktline.ts
- proxy.ts
- pull-bridge.ts
- reachable.ts
- ref-advertisement.test.ts
- ref-advertisement.ts
- ref-sync-protocol.ts
- ref-sync.ts
- refs.ts
- relay.ts
- snapshot.ts
- store.ts
- upload-pack.ts
- web-commit.ts
- writer.ts