Block a user
[security] Add rate limiting to session creation and login endpoints
[security] Store auth tokens as SHA-256 hashes instead of plaintext
[security] handleTopic: enforce channel membership check
1.0/mvp
Pre-1.0 Security Audit -- sneak/webhooker
Comprehensive security audit for internet-facing 1.0.0 readiness.
BLOCKERS -- Must Fix Before Internet Exposure
1. No Security Headers…
final 1.0rc1 review/audit/test/qa
1.0rc1 QA Audit -- sneak/chat
Scope: Security audit, code quality review, integration test, documentation…
Simple unauthenticated web UI showing test results and recent alerts
Implementation submitted as PR #83.
Adds a read-only web dashboard at GET / with:
- Summary counts for all monitored resources
- Domain,…
feat: add unauthenticated web dashboard showing monitoring state and recent alerts
Simple unauthenticated web UI showing test results and recent alerts
1.0/mvp
1.0 Readiness Assessment — complete review of all issues
✅ All Critical Path Issues Resolved
Config package has only 23% test coverage
Notify package has only 11.1% test coverage
Split Dockerfile: pre-built golangci-lint stage for faster CI
Rework complete — CI workflow fixes applied:
- Pinned
actions/checkoutby commit SHA (11bd71901bbe5b1630ceea73d27597364c9af683, v4.2.2) — tags are mutable and an RCE vector 2.…
fix: split Dockerfile with pinned images and add CI workflow
Rework Complete
Addressed both review items:
- Pinned
actions/checkoutby SHA —actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683(v4.2.2) instead of mutable@v4tag,…