[Security hardening] Add automated security audit workflow#2442

Open

PascalThuet wants to merge 41 commits into

github:mainfrom

PascalThuet:codex/add-security-audit-workflow

Commits on May 2, 2026

Add automated security audit workflow
PascalThuet
committed

Commits on May 6, 2026

Address remaining security review feedback
PascalThuet
committed

Commits on May 8, 2026

Merge origin/main into security audit workflow
PascalThuet
committed

Commits on May 13, 2026

Merge origin/main into security audit workflow
PascalThuet
committed

Commits on May 14, 2026

ci(security): tighten PR checks for security regressions
PascalThuet
committed

Commits on May 16, 2026

Commits on May 18, 2026

ci(security): address follow-up review
PascalThuet
committed

Commits on May 21, 2026

fix: address copilot security review follow-up
PascalThuet
committed

Commits on May 27, 2026

fix: wrap unsafe zip extraction errors
PascalThuet
committed

Commits on May 28, 2026

fix: address GHAS review and resolve conflicts
PascalThuet
committed

Commits on May 29, 2026

Commits on May 30, 2026

Commits on Jun 1, 2026

Merge remote-tracking branch 'origin/main' into codex/pr2442-resolve-conflicts
PascalThuet
committed

Commits on Jun 3, 2026

Commits on Jun 6, 2026

Commits on Jun 8, 2026

fix(security): pin tight read bounds on JSON responses; cap actual ZIP bytes

PascalThuet
and
claude
committed

Commits on Jun 11, 2026

fix: error messages and docstring name the exact loopback hosts
PascalThuet
committed