Ninym
|
5932a273a1
|
chore(ci): add semgrep guard against prototype pollution regressions in provider hot paths (#78)
* chore(ci): add semgrep rule no-bracket-assign-on-literal-object-map
* chore(ci): add workflow running semgrep bracket-assign guard on push/PR
* fix(parser): use Object.create(null) for categoryBreakdown map
* chore(ci): expand semgrep rule to cover ||, ??=, and if-guard variants
* chore(ci): limit push trigger to main and add semgrep --strict
* chore(ci): use jq to enforce finding count (--error unreliable in semgrep 1.x)
|
2026-04-18 15:10:24 -07:00 |
|