shithub Public

Notifications Fork 0 Star 0

Commits

8dd3cc02ffb261f59f80ea19d73d2985c5b14f71
Switch branches/tags
s50/cross-cutting scratch trunk default
All users
espadonne Matthew Forrester Wolffe
View commits for all users
All time
May 2026
‹ ›
Su Mo Tu We Th Fr Sa
26 27 28 29 30 1 2
3 4 5 6 7 8 9
10 11 12 13 14 15 16
17 18 19 20 21 22 23
24 25 26 27 28 29 30
31 1 2 3 4 5 6
Clear Today

Commits on May 9, 2026

  1. S36: internal/pagination/keyset — opaque cursor + HMAC-signed variant
    espadonne committed
    8dd3cc0
  2. S36: internal/cache/lru — count + sized LRU + singleflight Group
    espadonne committed
    fd186d2
  3. S36: promote golang.org/x/sync to direct dep
    espadonne committed
    8439048
  4. Merge pull request #3 from tenseleyFlow/login-email-identifier 
    Accept email login identifiers
    Matthew Forrester Wolffe committed
    b4a26c9
  5. Accept email login identifiers
    espadonne committed
    29c7714
  6. Merge pull request #2 from tenseleyFlow/issue-controls-policy 
    Gate issue and PR controls by policy
    Matthew Forrester Wolffe committed
    e4f8a82
  7. S35: docs — threat-model v1 (attackers, mitigations, scope)
    espadonne committed
    e01e064
  8. S35: docs — security-checklist with per-control test references
    espadonne committed
    39eee2c
  9. S35: hook lint-secret-logs into make ci
    espadonne committed
    baa7e44
  10. S35: lint scripts — secret-logs (blocking) + csrf (review-aid)
    espadonne committed
    a894fbb
  11. S35: wire ratelimit.Limiter into auth Deps
    espadonne committed
    5be109c
  12. S35: signup throttle — add per-/24 layer (S35) atop per-IP (S05)
    espadonne committed
    337355f
  13. S35: internal/security/openredirect — Safe + SafeOr next= validator
    espadonne committed
    ec6208f
  14. S35: webhook ssrf.go re-exports from security/ssrf; drop dup test
    espadonne committed
    c2d90a4
  15. S35: lift webhook SSRF defenses into shared internal/security/ssrf
    espadonne committed
    13f85d4
  16. S35: tests — ratelimit bucket + signup-IP per-/24
    espadonne committed
    fd680b6
  17. S35: ratelimit — token-bucket Allow + middleware + IP keyer
    espadonne committed
    d1e0592
  18. regen sqlc cross-package models for rate_limits tables
    espadonne committed
    d2d96f3
  19. S35: ratelimit sqlc — bump/peek/prune queries for rate_limits + signup_ip_throttle
    espadonne committed
    08db487
  20. S35: migration 0039 — rate_limits + signup_ip_throttle
    espadonne committed
    ffd6659
  21. Gate issue and PR controls by policy
    espadonne committed
    810896d
  22. Merge pull request #1 from tenseleyFlow/issue-public-create 
    Allow public issue participation
    Matthew Forrester Wolffe committed
    b9c83c2
  23. S34: wire admin under RequireUser + RequireSiteAdmin
    espadonne committed
    beb47e5
  24. S34: declare AdminMounter + register before lifecycle
    espadonne committed
    9d2664d
  25. S34: buildAdminHandlers wiring
    espadonne committed
    d526321
  26. S34: impersonation banner CSS
    espadonne committed
    9235b84
  27. S34: admin page templates (dashboard/users/repos/jobs/audit/system/email)
    espadonne committed
    31f7200
  28. S34: layout-level impersonation banner
    espadonne committed
    4fa8d24
  29. S34: admin sidebar nav partial
    espadonne committed
    e3091ee
  30. S34: admin helpers — recordAdminAction with double-actor audit
    espadonne committed
    2434ab3