taigrrSecurity (GIT-A1..A6, A9..A12, AZ-A3): gate fork PR bridging on live author access, fork-of-base heads only, revocation sweep on collaborator/org removal; tag protection on release create/delete and tag creation; compare and PR 'since' reachability; enforce_admins fails closed on unverifiable pushes; RFC 5987 archive names; per-caller LFS transfer limiter; safeDecode; paged hidden-ref cleanup; reach cache generations
f3b9112 ·
- ..
- badge.ts
- builtin-actions.ts
- cache-api.ts
- compile.ts
- config-admin.ts
- config-values.ts
- cron.ts
- deployments.ts
- dispatch.ts
- event-triggers.ts
- expressions.ts
- http.ts
- job-token.ts
- jobs.ts
- maintenance.ts
- markers.ts
- matrix.ts
- oidc.ts
- permissions.ts
- recompile.ts
- rerun.ts
- run-control.ts
- run-insert.ts
- run-workflow.ts
- runner-api.ts
- runner-claim.ts
- runner-do.ts
- runner-owner.ts
- runner-policy.ts
- runner-registration.ts
- runner-sizes.ts
- runner-variants.ts
- scheduler.ts
- script-runtime.ts
- script.ts
- segments.ts
- spec.ts
- triggers.ts
- usage-hooks.ts
- workflow-index.ts