codeburn/.github/workflows
Ninym 5932a273a1
chore(ci): add semgrep guard against prototype pollution regressions in provider hot paths (#78)
* chore(ci): add semgrep rule no-bracket-assign-on-literal-object-map

* chore(ci): add workflow running semgrep bracket-assign guard on push/PR

* fix(parser): use Object.create(null) for categoryBreakdown map

* chore(ci): expand semgrep rule to cover ||, ??=, and if-guard variants

* chore(ci): limit push trigger to main and add semgrep --strict

* chore(ci): use jq to enforce finding count (--error unreliable in semgrep 1.x)
2026-04-18 15:10:24 -07:00
..
block-claude-coauthor.yml ci: block Co-authored-by Claude/Anthropic trailers on PRs 2026-04-18 09:02:48 -07:00
ci.yml chore(ci): add semgrep guard against prototype pollution regressions in provider hot paths (#78) 2026-04-18 15:10:24 -07:00
release-menubar.yml docs: scrub private strategy notes from public text 2026-04-17 17:12:48 -07:00