Harden generator input handling and build supply chain - #399

Merged

luispabon merged 13 commits into

Sep 25, 2026

Commits on Sep 25, 2026

Fix orphan tempnam base file in Archiver
luispabon
committed
06f5ece
Add bounded path validation and POST generation rate limiting
luispabon
committed
1415435
Pin workflow actions to immutable SHAs and set least-privilege permissions
luispabon
committed
2a4a478
Harden Makefile mkcert/hosts downloads
luispabon
committed
395e691
Handle unlink and ZipArchive open failures in Archiver
luispabon
committed
e15d1af
Tighten path grammar and rate limiter dependency floor
luispabon
committed
721aacf
Harden Makefile mkcert/hosts downloads
luispabon
committed
439ba15
Isolate rate limiter in functional tests via unique client IP
luispabon
committed
b862b3e
Pin GitHub Actions refs in tests workflow to full SHAs
luispabon
committed
9e7c569
Fix Makefile verify targets to chmod verified binaries
luispabon
committed
b59dae7
Reject slash-only host paths and cover path injection/length regressions
luispabon
committed
40732d5
Trust forwarded headers only from configured proxies
luispabon
committed
5e6a8c6
Add least-privilege permissions block to tests workflow
luispabon
committed
9282f7e