mirror of
https://github.com/vince-winkintel/gitlab-cli-skills.git
synced 2026-09-19 06:01:21 +08:00
Vince Lozada
732ab95906
* security: address HIGH/MEDIUM findings from skills.sh audit - Remove eval from mr-review-workflow.sh; add command allowlist - Replace direct config file parsing with glab auth token in add-inline-comment.sh - Add external content boundary markers to create-mr-from-issue.sh and ci-debug.sh - Add private key upload warning to glab-ssh-key/SKILL.md - Add prompt injection warnings to glab-api, glab-ci, glab-job SKILL.md files - Add SECURITY.md with full security policy and guidance Fixes #34 * chore: exclude SECURITY.md from zip export --------- Co-authored-by: Steven (Bot) <steven@winkintel.com>
7 lines
171 B
Plaintext
7 lines
171 B
Plaintext
LICENSE export-ignore
|
|
.DS_Store export-ignore
|
|
.gitignore export-ignore
|
|
.gitattributes export-ignore
|
|
RELEASE_NOTES_BEST_PRACTICE.md export-ignore
|
|
SECURITY.md export-ignore
|