Commits
Note: To verify signed commits locally, download the allowed signers file and run: git -c gpg.format=ssh -c gpg.ssh.allowedSignersFile=allowed_signers verify-commit
- harden low-severity review findings across git, CI, and auth
- security: fix git arg injection and harden CI, transport, and uploads
- small ui fixes
- add LICENSE.md
- style fixes of repo danger zone
- escape jsx strings
- CSP fixes
- default scanned repo to private
- security: harden cookies + CSRF for reverse-proxy deployments
- security: fix authz, DOS, and concurrency findings from review
- various small improvements
- CSP, various small improvements
- CI/CD system improvements
- add pipelines
- style fixes, remove release file types
- extract constants
- invalidate branch & tag cache on pushes
- branch list & mutations, tag list & mutations, more file mutations
- update readme
- bug fixes, add length limits to various user provided strings