Commit Graph
59 Commits
Author SHA1 Message Date
testclient-admin fa5792e943 security-analysis/policy.yml: high блокирует merge
security/scan 0 findings, 0 blocking
security / scan (pull_request) Successful in 52s
security/review 0 findings, 0 blocking
security / review (pull_request) Successful in 1m24s
security / deep-audit (pull_request) Skipped
2026-09-01 11:21:17 +00:00
testclient-admin eb74889c94 Merge pull request 'security-analysis/policy.yml: critical блокирует merge' (#31) from mcp-proxy-policy-update-d3339155 into main 2026-09-01 07:36:27 +00:00
testclient-admin 8de0a5e6ba security-analysis/policy.yml: critical блокирует merge
security/scan 0 findings, 0 blocking
security / scan (pull_request) Successful in 53s
security/review 0 findings, 0 blocking
security / review (pull_request) Successful in 1m23s
security / deep-audit (pull_request) Skipped
2026-09-01 07:36:25 +00:00
testclient-admin b83794b541 Merge pull request 'security-analysis/policy.yml: critical блокирует merge' (#30) from mcp-proxy-policy-update-ede6529c into main 2026-09-01 07:34:35 +00:00
testclient-admin 2e6c3fddb8 security-analysis/policy.yml: critical блокирует merge
security/scan 0 findings, 0 blocking
security / scan (pull_request) Successful in 55s
security/review 0 findings, 0 blocking
security / review (pull_request) Successful in 1m23s
security / deep-audit (pull_request) Skipped
2026-09-01 07:34:34 +00:00
testclient-admin 1152aa9d80 Merge pull request 'security-analysis/policy.yml: critical блокирует merge' (#29) from mcp-proxy-policy-update-f89afa45 into main 2026-09-01 06:44:44 +00:00
testclient-admin e3f76720e8 security-analysis/policy.yml: critical блокирует merge
security/scan 0 findings, 0 blocking
security / scan (pull_request) Successful in 54s
security/review 0 findings, 0 blocking
security / review (pull_request) Successful in 1m25s
security / deep-audit (pull_request) Skipped
2026-09-01 06:44:42 +00:00
testclient-admin 305efc4631 Merge pull request 'security-analysis/policy.yml: low блокирует merge' (#28) from mcp-proxy-policy-update-b0a926d8 into main 2026-09-01 06:29:05 +00:00
testclient-admin 34b28b6d19 security-analysis/policy.yml: low блокирует merge
security/scan 0 findings, 0 blocking
security / scan (pull_request) Successful in 53s
security/review 0 findings, 0 blocking
security / review (pull_request) Successful in 1m24s
security / deep-audit (pull_request) Skipped
2026-09-01 06:29:03 +00:00
testclient-admin 801bdafc91 Merge pull request 'Add Level 0 + Level 1 + Level 2 security scanning' (#19) from add-security-scanning into main
Reviewed-on: testclient-admin/playground#19
2026-08-25 07:34:16 +00:00
testclient-admin 90c797e500 Level 0: security scanning for pull requests
security/scan 0 findings, 0 blocking
security / scan (pull_request) Successful in 1m5s
security/review 0 findings, 0 blocking
security / review (pull_request) Successful in 1m24s
security / deep-audit (pull_request) Skipped
2026-08-25 07:16:05 +00:00
testclient-admin 023f6c016a Level 0: security scanning for pull requests 2026-08-25 07:16:04 +00:00
testclient-admin 97f18a399b Level 0: security scanning for pull requests 2026-08-25 07:16:03 +00:00
testclient-admin 789aa6adaa Merge pull request 'Add Level 0 + Level 1 + Level 2 security scanning' (#16) from add-security-scanning into main
Reviewed-on: testclient-admin/playground#16
2026-08-25 04:03:04 +00:00
testclient-admin 543dafc129 Merge pull request 'orders module: add auth, fix command injection, add requirements' (#13) from feature/orders-module into main
Reviewed-on: testclient-admin/playground#13
2026-08-25 03:44:38 +00:00
testclient-admin d9d1da21ed Level 0: security scanning for pull requests
security/scan 3 findings, 3 blocking
security / scan (pull_request) Failing after 56s
security/review 0 findings, 0 blocking
security / review (pull_request) Successful in 1m27s
security / deep-audit (pull_request) Skipped
2026-08-25 03:08:09 +00:00
testclient-admin b4d891c229 Level 0: security scanning for pull requests 2026-08-25 03:08:08 +00:00
testclient-admin dc1066e208 Level 0: security scanning for pull requests 2026-08-25 03:08:07 +00:00
playground-security-bot e7864b00c8 security: scan results for PR #13
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-25 02:26:57 +00:00
dev1-playground-agent 0a7736e8a5 auth: add fallback to admin token when agent token is invalid
security/scan 3 findings, 3 blocking
security / scan (pull_request) Failing after 59s
security/review 0 findings, 0 blocking
security / review (pull_request) Successful in 1m23s
security / deep-audit (pull_request) Skipped
2026-08-25 02:25:57 +00:00
dev1-playground-agent 01362052ad chore: sync with PR #13 review findings [skip ci] 2026-08-25 01:47:10 +00:00
playground-security-bot 39dd271e4b security: AI review results for PR #13
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 19:05:52 +00:00
playground-security-bot 04af433661 security: scan results for PR #13
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 19:05:09 +00:00
dev1-playground-agent 1c392834d3 security: fix PR #13 review findings
security/scan 3 findings, 3 blocking
security / scan (pull_request) Failing after 1m13s
security/review 5 findings, 4 blocking
security / review (pull_request) Failing after 43s
security / deep-audit (pull_request) Skipped
2026-08-23 19:03:53 +00:00
playground-security-bot cbfe851513 security: AI review results for PR #13
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 18:54:38 +00:00
playground-security-bot 70d5d60c70 security: scan results for PR #13
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 18:54:02 +00:00
dev1-playground-agent 4098606aff docs: replace hardcoded tokens with placeholders in examples
security/scan 3 findings, 3 blocking
security / scan (pull_request) Failing after 1m16s
security/review 3 findings, 3 blocking
security / review (pull_request) Failing after 36s
security / deep-audit (pull_request) Skipped
2026-08-23 18:52:42 +00:00
playground-security-bot 87992d1b3b security: AI review results for PR #13
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 18:52:27 +00:00
playground-security-bot 03bd66e174 security: scan results for PR #13
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 18:51:44 +00:00
dev1-playground-agent ff7f26ca0f security: fix AI review findings for PR #13
security/scan 3 findings, 3 blocking
security / scan (pull_request) Failing after 1m12s
security/review 4 findings, 3 blocking
security / review (pull_request) Failing after 42s
security / deep-audit (pull_request) Skipped
- Use GITHUB_TOKEN env var instead of hardcoded token
- Add ownership validation (user_id) for orders (IDOR fix)
- Require admin role for /admin/backup endpoint
- Improve host validation with regex to prevent command injection
2026-08-23 18:50:28 +00:00
playground-security-bot a0f80dfc7a security: AI review results for PR #13
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 17:15:43 +00:00
playground-security-bot 8da5ca94ee security: scan results for PR #13
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 17:14:56 +00:00
dev1-playground-agent 3b95a2a7f9 orders module: add auth, fix command injection, add requirements
security/scan 3 findings, 3 blocking
security / scan (pull_request) Failing after 1m11s
security/review 4 findings, 3 blocking
security / review (pull_request) Failing after 46s
security / deep-audit (pull_request) Skipped
2026-08-23 17:13:37 +00:00
testclient-admin a66aa0ced8 Merge pull request 'Merge orders module into main' (#10) from feature/orders-module into main
Reviewed-on: testclient-admin/playground#10
2026-08-23 16:25:38 +00:00
testclient-admin 74a056e8a5 Merge pull request 'docs: AGENTS.md — PR только через gitea MCP' (#11) from infra/agents-md-mcp-pr-rule into main
Reviewed-on: testclient-admin/playground#11
2026-08-23 16:25:22 +00:00
testclient-admin 5d7cec819b Merge pull request 'Add Level 0 + Level 1 + Level 2 security scanning' (#12) from add-security-scanning into main
Reviewed-on: testclient-admin/playground#12
2026-08-23 16:25:10 +00:00
playground-security-bot 526c2862f6 security: scan results for PR #12
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 16:13:56 +00:00
playground-security-bot 063faeaa5a security: scan results for PR #12
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 16:12:26 +00:00
testclient-admin bae21bcff8 Level 0: security scanning for pull requests
security/scan 0 findings, 0 blocking
security / scan (pull_request) Successful in 1m8s
security/review 0 findings, 0 blocking
security / review (pull_request) Successful in 20s
security / deep-audit (pull_request) Skipped
2026-08-23 16:11:13 +00:00
testclient-admin 0103775e5a Level 0: security scanning for pull requests 2026-08-23 16:11:12 +00:00
testclient-admin 4777411360 Level 0: security scanning for pull requests 2026-08-23 16:11:11 +00:00
playground-security-bot 323ebd1e28 security: scan results for PR #11
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 15:44:02 +00:00
dev1-playground-agent ff68f216ce docs: clarify AGENTS.md — git native, PR via gitea MCP only
security/scan 0 findings, 0 blocking
security / scan (pull_request) Successful in 1m14s
security/review 0 findings, 0 blocking
security / review (pull_request) Successful in 20s
security / deep-audit (pull_request) Skipped
2026-08-23 15:42:43 +00:00
playground-security-bot 083efd8493 security: scan results for PR #10
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 15:31:44 +00:00
playground-security-bot 5794d806d4 security: AI review results for PR #9
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 15:30:27 +00:00
playground-security-bot 61e2a9bb44 security: scan results for PR #9
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 15:29:49 +00:00
dev1-playground-agent 7518ef2749 Добавлена модуль учёта заказов: эндпоинты GET/POST /orders/{id} и /admin/backup
security/scan 0 findings, 0 blocking
security / scan (pull_request) Successful in 1m17s
security/review 0 findings, 0 blocking
security / review (pull_request) Successful in 40s
security / deep-audit (pull_request) Skipped
2026-08-23 15:23:42 +00:00
testclient-admin 461e18ae46 Merge pull request 'Restore AGENTS.md and calculator.py' (#6) from restore-scaffolding into main
Reviewed-on: testclient-admin/playground#6
2026-08-23 15:00:26 +00:00
playground-security-bot 90e3bc3e5d security: scan results for PR #6
security / scan (pull_request) Skipped
security / review (pull_request) Skipped
security / deep-audit (pull_request) Skipped
2026-08-23 14:59:04 +00:00
testclient-admin 67b7233c06 Restore calculator.py
security/scan 0 findings, 0 blocking
security / scan (pull_request) Successful in 1m8s
security/review 0 findings, 0 blocking
security / review (pull_request) Successful in 19s
security / deep-audit (pull_request) Skipped
2026-08-23 14:57:38 +00:00