shithub Public

Notifications Fork 0 Star 0

Commits

e1c16d6e4bcdadd4e18beeee0e49d3b72438f4a7
Switch branches/tags
s50/cross-cutting scratch trunk default
All users
espadonne Matthew Forrester Wolffe
View commits for all users
All time
May 2026
‹ ›
Su Mo Tu We Th Fr Sa
26 27 28 29 30 1 2
3 4 5 6 7 8 9
10 11 12 13 14 15 16
17 18 19 20 21 22 23
24 25 26 27 28 29 30
31 1 2 3 4 5 6
Clear Today

Commits on May 9, 2026

  1. S36: bench harness — HTTP scenario probe + JSON output
    espadonne committed
    e1c16d6
  2. S36: branchesList uses AheadBehindCached keyed on OIDs
    espadonne committed
    4f16faa
  3. S36: AheadBehindCached — LRU + singleflight wrap (S20 H4)
    espadonne committed
    9d196ff
  4. S36: CountQueries middleware + QueriesFor test helper
    espadonne committed
    f9efda2
  5. S36: tests — query counter increments + nil-context safety
    espadonne committed
    2329a10
  6. S36: pgx QueryCounter tracer + WithCounter/FromContext context plumbing
    espadonne committed
    791b397
  7. S36: internal/pagination/keyset — opaque cursor + HMAC-signed variant
    espadonne committed
    8dd3cc0
  8. S36: internal/cache/lru — count + sized LRU + singleflight Group
    espadonne committed
    fd186d2
  9. S36: promote golang.org/x/sync to direct dep
    espadonne committed
    8439048
  10. Merge pull request #3 from tenseleyFlow/login-email-identifier 
    Accept email login identifiers
    Matthew Forrester Wolffe committed
    b4a26c9
  11. Accept email login identifiers
    espadonne committed
    29c7714
  12. Merge pull request #2 from tenseleyFlow/issue-controls-policy 
    Gate issue and PR controls by policy
    Matthew Forrester Wolffe committed
    e4f8a82
  13. S35: docs — threat-model v1 (attackers, mitigations, scope)
    espadonne committed
    e01e064
  14. S35: docs — security-checklist with per-control test references
    espadonne committed
    39eee2c
  15. S35: hook lint-secret-logs into make ci
    espadonne committed
    baa7e44
  16. S35: lint scripts — secret-logs (blocking) + csrf (review-aid)
    espadonne committed
    a894fbb
  17. S35: wire ratelimit.Limiter into auth Deps
    espadonne committed
    5be109c
  18. S35: signup throttle — add per-/24 layer (S35) atop per-IP (S05)
    espadonne committed
    337355f
  19. S35: internal/security/openredirect — Safe + SafeOr next= validator
    espadonne committed
    ec6208f
  20. S35: webhook ssrf.go re-exports from security/ssrf; drop dup test
    espadonne committed
    c2d90a4
  21. S35: lift webhook SSRF defenses into shared internal/security/ssrf
    espadonne committed
    13f85d4
  22. S35: tests — ratelimit bucket + signup-IP per-/24
    espadonne committed
    fd680b6
  23. S35: ratelimit — token-bucket Allow + middleware + IP keyer
    espadonne committed
    d1e0592
  24. regen sqlc cross-package models for rate_limits tables
    espadonne committed
    d2d96f3
  25. S35: ratelimit sqlc — bump/peek/prune queries for rate_limits + signup_ip_throttle
    espadonne committed
    08db487
  26. S35: migration 0039 — rate_limits + signup_ip_throttle
    espadonne committed
    ffd6659
  27. Gate issue and PR controls by policy
    espadonne committed
    810896d
  28. Merge pull request #1 from tenseleyFlow/issue-public-create 
    Allow public issue participation
    Matthew Forrester Wolffe committed
    b9c83c2
  29. S34: wire admin under RequireUser + RequireSiteAdmin
    espadonne committed
    beb47e5
  30. S34: declare AdminMounter + register before lifecycle
    espadonne committed
    9d2664d