jappel/leistungsbilanz-ts
1
0
Fork 1
Code Issues 6 Pull requests Projects Releases Packages Wiki Activity Actions
292 commits 3 branches 1 tag 6.5 MiB
Commit graph

2 commits

Author SHA1 Message Date
Grovy311
afd8019a7b Address security review notes
Some checks are pending
security-baseline / secrets (push) Waiting to run
Details
security-baseline / node (push) Waiting to run
Details
security-baseline / semgrep (push) Waiting to run
Details
security-baseline / trivy (push) Waiting to run
Details 
- log only the error name for rejected 4xx requests (JSON.parse messages
  can quote the request body, e.g. a password)
- refuse LB_DATABASE_PATH in production; it is test-only
- fix two stale file references in the skill texts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-15 09:45:59 +02:00
Grovy311
67476ea59b Add agent security skills for Codex and Claude Code 
Same skills in .agents/skills (Codex) and .claude/skills (Claude Code):
codeguard, security-review, dependency-vetting, pre-release-gate,
authz-idor-audit, threat-model-light. Source: cj/claude-skills.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-15 09:40:33 +02:00