Ninym 5932a273a1 chore(ci): add semgrep guard against prototype pollution regressions in provider hot paths (#78) ... * chore(ci): add semgrep rule no-bracket-assign-on-literal-object-map * chore(ci): add workflow running semgrep bracket-assign guard on push/PR * fix(parser): use Object.create(null) for categoryBreakdown map * chore(ci): expand semgrep rule to cover ||, ??=, and if-guard variants * chore(ci): limit push trigger to main and add semgrep --strict * chore(ci): use jq to enforce finding count (--error unreliable in semgrep 1.x)		2026-04-18 15:10:24 -07:00
..
no-bracket-assign-hot-paths.yml	chore(ci): add semgrep guard against prototype pollution regressions in provider hot paths (#78)	2026-04-18 15:10:24 -07:00