naibaandcloudcode 401713bab5 ci(gosec): silence G101 false positives on PAT context keys and scope const ...

gosec G101 flags apiTokenCtxKey, apiTokenLastUsedCtxKey, and the
ScopeNotificationGroupWrite identifier as hardcoded credentials. They are
context-key names and a scope string, not secrets. Annotate them with
#nosec G101 (matching the existing JWTSecretEnvKey precedent) so the
gosec CI step passes without disabling the rule globally.

Co-authored-by: cloudcode <cloudcode@users.noreply.github.com>

2026-05-31 08:16:55 +00:00

..

admin-dist

feat: embed dist

2024-11-29 21:31:39 +08:00

controller

ci(gosec): silence G101 false positives on PAT context keys and scope const

2026-05-31 08:16:55 +00:00

rpc

fix(security): set real IP from peer in ConfigUsePeerIP gRPC mode

2026-05-31 07:45:23 +00:00

user-dist

feat: embed dist

2024-11-29 21:31:39 +08:00

main.go

feat(auth): add PAT auth, scoped REST/MCP access, CSRF, and tenant isolation

2026-05-30 15:56:44 +00:00