adam/afterhours-shift-manager
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/afterhours-shift-manager.git synced 2026-09-30 10:13:11 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
afterhours-shift-manager/tests
History
Adam Moussa 7e4458724f Harden release workflow and regex against CodeQL findings 
Address three code-scanning alerts on the PR:

- Critical (actions/untrusted-checkout): split release.yaml into a
  read-only `prepare` job that checks out and runs repo code, and a
  privileged `publish` job (contents:write + OIDC) that never checks out
  repo code — it tags, releases, and invokes purely through the GitHub
  and AWS APIs. Also assert head_branch == main.
- High x2 (py/polynomial-redos): rewrite the italic and link regexes in
  markdown_to_mrkdwn with possessive quantifiers and exclusive character
  classes so they run in linear time on adversarial input. Adds a
  regression test.
2026-06-11 19:30:55 -04:00
..
release_notifier Add changelog-driven releases and App Home tab 2026-06-11 19:15:20 -04:00
ring_scheduler Add pytest suite and wire it into CI (#85) (#86) 2026-06-01 19:07:08 -04:00
roster_sync Add pytest suite and wire it into CI (#85) (#86) 2026-06-01 19:07:08 -04:00
scripts Add changelog-driven releases and App Home tab 2026-06-11 19:15:20 -04:00
shared Harden release workflow and regex against CodeQL findings 2026-06-11 19:30:55 -04:00
slack_bot Add changelog-driven releases and App Home tab 2026-06-11 19:15:20 -04:00
weekly_post Add pytest suite and wire it into CI (#85) (#86) 2026-06-01 19:07:08 -04:00
conftest.py Add pytest suite and wire it into CI (#85) (#86) 2026-06-01 19:07:08 -04:00
requirements.txt Add pytest suite and wire it into CI (#85) (#86) 2026-06-01 19:07:08 -04:00