ruv 924c32547e fix: ADR-080 P0 security + CI remediation from QE analysis ... Address all 5 P0 issues from QE analysis (55/100 score): - P0-1: Rate limiter bypass — validate X-Forwarded-For against trusted proxy list - P0-2: Exception detail leak — generic 500 messages, exception_type gated by dev mode - P0-3: WebSocket JWT in URL (CWE-598) — first-message auth pattern replaces query param - P0-4: Rust tests not in CI — add rust-tests job gating docker-build and notify - P0-5: WebSocket path mismatch — use WS_PATH constant instead of hardcoded /ws/sensing Includes ADR-080 remediation plan and 9 QE reports (4,914 lines). Firmware validated on ESP32-S3 (COM8): CSI collecting, calibration OK. Co-Authored-By: claude-flow <ruv@ruv.net>		2026-04-06 16:12:13 -04:00
..
cd.yml	security: Fix GitHub Actions shell injection vulnerability	2026-02-28 20:40:25 +01:00
ci.yml	fix: ADR-080 P0 security + CI remediation from QE analysis	2026-04-06 16:12:13 -04:00
desktop-release.yml	ci: update desktop-release workflow for v0.4.0 with attach_to_existing option	2026-03-09 22:01:33 -04:00
firmware-ci.yml	fix(ci): upgrade Firmware CI to IDF v5.4, replace xxd with od (#327)	2026-03-28 11:01:44 -04:00
firmware-qemu.yml	fix(firmware): fall detection, 4MB flash, QEMU CI (#263, #265)	2026-03-15 11:49:29 -04:00
security-scan.yml	feat: ADR-024 Contrastive CSI Embedding Model — all 7 phases (#52)	2026-03-01 01:44:38 -05:00
update-submodules.yml	chore: track upstream main branch for vendor submodules	2026-03-04 13:30:48 -05:00
verify-pipeline.yml	feat: CI pipeline verification, 3D body model, auth fixes, requirements lock	2026-02-28 06:20:08 +00:00