amoussa1229 2598c89abf fix(api): use .endswith('.amazonaws.com') instead of substring check for execute-api detection ... The prior '.execute-api.' in domain substring check is fragile and triggers CodeQL incomplete-sanitization warnings. All API Gateway default domains end with .amazonaws.com, so a suffix check is more precise and also silences the false-positive alert. Refs: https://github.com/Sea-Haven-Industries/procurement-ingest/security/code-scanning/6		2026-07-24 22:35:39 +00:00
..
api	fix(api): use .endswith('.amazonaws.com') instead of substring check for execute-api detection	2026-07-24 22:35:39 +00:00
po	chore(deps): bump boto3 (#122)	2026-07-21 16:06:26 -04:00
shared	feat(api): procurement-api read stack + OpenAPI docs (SHOC reconciliation path) (#127)	2026-07-23 19:32:20 -04:00
wo	feat(webhook): SHOC WO webhook emitter - dark-ship streams + HMAC secret/rotation (PR-2) (#137)	2026-07-24 22:12:20 +00:00