Adam Moussa 7e4458724f Harden release workflow and regex against CodeQL findings ... Address three code-scanning alerts on the PR: - Critical (actions/untrusted-checkout): split release.yaml into a read-only `prepare` job that checks out and runs repo code, and a privileged `publish` job (contents:write + OIDC) that never checks out repo code — it tags, releases, and invokes purely through the GitHub and AWS APIs. Also assert head_branch == main. - High x2 (py/polynomial-redos): rewrite the italic and link regexes in markdown_to_mrkdwn with possessive quantifiers and exclusive character classes so they run in linear time on adversarial input. Adds a regression test.		2026-06-11 19:30:55 -04:00
..
test_blocks.py	Harden release workflow and regex against CodeQL findings	2026-06-11 19:30:55 -04:00
test_changelog.py	Add changelog-driven releases and App Home tab	2026-06-11 19:15:20 -04:00
test_ring_scheduler.py	Add pytest suite and wire it into CI (#85) (#86)	2026-06-01 19:07:08 -04:00
test_schedule.py	Add swap-acceptance (verified-swap) flow (#87)	2026-06-01 19:22:55 -04:00
test_secrets.py	Add pytest suite and wire it into CI (#85) (#86)	2026-06-01 19:07:08 -04:00
test_three_cx_client.py	Add pytest suite and wire it into CI (#85) (#86)	2026-06-01 19:07:08 -04:00