upaas/internal
clawbot 4f81d9cb70 fix: address review feedback - security hardening and lint cleanup
- Remove all nolint:gosec annotations from branch, use targeted #nosec
  with explanations only where gosec taint analysis produces false positives
- Remove unused loginRequest struct (was causing G117 + unused lint errors)
- Add SanitizeLogs() for container log output (attacker-controlled data)
- Add validateWebhookURL() helper with scheme validation for SSRF defense
- Add path traversal protection via filepath.Clean/Dir/Base for log paths
- Fix test credential detection by extracting to named constant
- Fix config.go: use filepath.Clean for session secret path
- Fix formatting issues

All make check passes with zero failures.
2026-02-20 03:00:02 -08:00
..
config fix: address review feedback - security hardening and lint cleanup 2026-02-20 03:00:02 -08:00
database fix: remove undeployed api_tokens migrations (006 + 007) 2026-02-16 00:34:02 -08:00
docker fix: resolve all lint issues on main branch 2026-02-20 02:39:18 -08:00
globals Initial commit with server startup infrastructure 2025-12-29 15:46:03 +07:00
handlers fix: address review feedback - security hardening and lint cleanup 2026-02-20 03:00:02 -08:00
healthcheck Initial commit with server startup infrastructure 2025-12-29 15:46:03 +07:00
logger Initial commit with server startup infrastructure 2025-12-29 15:46:03 +07:00
middleware fix: address review feedback - security hardening and lint cleanup 2026-02-20 03:00:02 -08:00
models Revert "Merge pull request 'feat: add Gitea Actions CI for make check (closes #96)' (#98) from feat/ci-make-check into main" 2026-02-19 20:36:22 -08:00
server fix: restrict CORS to configured origins (closes #40) 2026-02-19 13:45:18 -08:00
service fix: address review feedback - security hardening and lint cleanup 2026-02-20 03:00:02 -08:00
ssh fix: resolve all lint issues on main branch 2026-02-20 02:39:18 -08:00