 copilot-swe-agent[bot]
|
489aa67a13
|
fix(security): remediate path traversal vulnerabilities in file operations
- Fix critical vulnerability: sanitize GPT metadata filename before use
- Fix insecure string-based path validation with pathlib methods
- Add validation for GPT-extracted filenames
- Add comprehensive security test suite (24 tests)
- Document all findings in SECURITY_AUDIT.md
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
|
2026-02-10 10:26:42 +00:00 |
|
|
Christian Krakau-Louis
|
8ac16420b2
|
Update SECURITY_AUDIT.md with the latest audit results.
|
2026-02-09 22:08:35 +01:00 |
|
|
copilot-swe-agent[bot]
|
b3b74adb45
|
chore: remove dead files and duplicate workflows
- Delete build-setup.sh (empty shell script)
- Delete docker-build.sh (empty shell script)
- Delete .github/workflows/codeql.yaml (duplicate, keeping codeql.yml)
- Delete issues/ directory (3 markdown files)
- Update SECURITY_AUDIT.md to remove completed task about consolidating CodeQL workflows
- Update docs/archive/ANALYSIS_SUMMARY.md to reference codeql.yml instead of codeql.yaml
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
|
2026-02-08 17:02:11 +00:00 |
|
|
copilot-swe-agent[bot]
|
7fc2703d90
|
Increase HTTP request timeout to 120s for large file processing (up to 1GB PDFs)
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
|
2026-02-07 19:39:57 +00:00 |
|
|
copilot-swe-agent[bot]
|
755ef8a2e5
|
Add Bandit to CI pipeline and update security audit documentation
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
|
2026-02-07 19:38:47 +00:00 |
|
|
copilot-swe-agent[bot]
|
f0f48b39a9
|
Add security fixes, testing infrastructure, and CI/CD improvements
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
|
2026-02-06 21:55:19 +00:00 |
|