mirror of
https://github.com/UditAkhourii/adhd.git
synced 2026-09-14 16:00:16 +08:00
Haris Chechi
5001cd5cec
- Fix command injection in summary.yml: replace shell gh command with actions/github-script to avoid shell interpolation of AI output - Harden prompt injection defense with structural tag boundaries - Add Zod validation for all LLM JSON output (schemas were a dependency but unused) - Add CLI input validation with bounds checking for numeric flags and file size limit for --context - Replace biased sort-based shuffle with Fisher-Yates in frame selection - Add npm test to CI workflow - Update actions/stale from v5 to v9 with real messages - Fill in SECURITY.md with responsible disclosure policy Co-authored-by: Haris Chechi <chechi@Hariss-Air.lan> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
28 lines
954 B
YAML
28 lines
954 B
YAML
# This workflow warns and then closes issues and PRs that have had no activity for a specified amount of time.
|
|
#
|
|
# You can adjust the behavior by modifying this file.
|
|
# For more information, see:
|
|
# https://github.com/actions/stale
|
|
name: Mark stale issues and pull requests
|
|
|
|
on:
|
|
schedule:
|
|
- cron: '33 8 * * *'
|
|
|
|
jobs:
|
|
stale:
|
|
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
issues: write
|
|
pull-requests: write
|
|
|
|
steps:
|
|
- uses: actions/stale@v9
|
|
with:
|
|
repo-token: ${{ secrets.GITHUB_TOKEN }}
|
|
stale-issue-message: 'This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.'
|
|
stale-pr-message: 'This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.'
|
|
stale-issue-label: 'no-issue-activity'
|
|
stale-pr-label: 'no-pr-activity'
|