Security Audit

Workflow runs for Security Audit

• Bump actions/stale from 10.4.0 to 11.0.0

  completed successfully:
  Security Audit#123:Pull request#24openedbydependabot[bot]Bot
  dependabot/github_actions/actions/stale-11.0.0

  Nov 13, 20261m 15s
  More actions for workflow run 123

• Bump actions/checkout from 6.1.0 to 7.0.1

  completed successfully:
  Security Audit#122:Pull request#23openedbydependabot[bot]Bot
  dependabot/github_actions/actions/checkout-7.0.1

  Nov 13, 202652s
  More actions for workflow run 122

• Bump dependabot/fetch-metadata from 2.5.0 to 3.1.0

  completed successfully:
  Security Audit#121:Pull request#22openedbydependabot[bot]Bot
  dependabot/github_actions/dependabot/fetch-metadata-3.1.0

  Nov 13, 202656s
  More actions for workflow run 121

• Bump actions/labeler from 5.0.0 to 7.0.0

  completed successfully:
  Security Audit#120:Pull request#21openedbydependabot[bot]Bot
  dependabot/github_actions/actions/labeler-7.0.0

  Nov 13, 202654s
  More actions for workflow run 120

• docs: short changelog

  completed successfully:
  Security Audit#119:Commitcea4fdapushedbyboxlinknet
  main

  Nov 11, 20262m 31s
  More actions for workflow run 119

• docs: security entries say only 'Security fix'

  completed successfully:
  Security Audit#118:Commit3c56e55pushedbyboxlinknet
  main

  Nov 11, 20261m 6s
  More actions for workflow run 118

• Security Audit

  completed successfully:
  Security Audit#117:Scheduled
  main

  Nov 9, 202653s
  More actions for workflow run 117

• Rails OTP example: explicit protect_from_forgery (#20)

  completed successfully:
  Security Audit#116:Commitfe6df70pushedbyboxlinknet
  main

  Nov 8, 202650s
  More actions for workflow run 116

• Rails OTP example: explicit CSRF protection

  completed successfully:
  Security Audit#115:Pull request#20openedbyboxlinknet
  fix/rails-example-csrf

  Nov 8, 202652s
  More actions for workflow run 115

• Rails OTP example: API controller, CSRF not disabled (#18)

  completed successfully:
  Security Audit#114:Commitd6be064pushedbyboxlinknet
  main

  Nov 8, 202649s
  More actions for workflow run 114

• Linear-time HTML strip and User-Agent trim (#17)

  completed successfully:
  Security Audit#113:Commitace1e65pushedbyboxlinknet
  main

  Nov 8, 20261m 8s
  More actions for workflow run 113

• Rails OTP example: API controller, CSRF not disabled

  completed successfully:
  Security Audit#112:Pull request#18synchronizebyboxlinknet
  fix/rails-example-api

  Nov 8, 202652s
  More actions for workflow run 112

• Rails OTP example: API controller, CSRF not disabled

  completed successfully:
  Security Audit#111:Pull request#18synchronizebyboxlinknet
  fix/rails-example-api

  Nov 8, 202654s
  More actions for workflow run 111

• Linear-time HTML strip and User-Agent trim

  completed successfully:
  Security Audit#110:Pull request#17synchronizebyboxlinknet
  fix/linear-strip

  Nov 8, 202649s
  More actions for workflow run 110

• CI: pin actions to commit SHAs; read-only token by default, write onl…

  completed successfully:
  Security Audit#109:Commit2ab9f56pushedbyboxlinknet
  main

  Nov 8, 20261m 3s
  More actions for workflow run 109

• CI: pinned actions and least-privilege tokens

  completed successfully:
  Security Audit#108:Pull request#19openedbyboxlinknet
  ci/pin-and-permissions

  Nov 8, 202648s
  More actions for workflow run 108

• Rails OTP example: API controller, CSRF not disabled

  completed successfully:
  Security Audit#107:Pull request#18openedbyboxlinknet
  fix/rails-example-api

  Nov 8, 20261m 0s
  More actions for workflow run 107

• Linear-time HTML strip and User-Agent trim

  completed successfully:
  Security Audit#106:Pull request#17openedbyboxlinknet
  fix/linear-strip

  Nov 8, 202656s
  More actions for workflow run 106

• CI: auto-tag skips a tag that already exists; allow a manual run (#16)

  completed successfully:
  Security Audit#105:Commit6e9fb0cpushedbyboxlinknet
  main

  Nov 8, 20261m 9s
  More actions for workflow run 105

• CI: auto-tag skips an existing tag

  completed successfully:
  Security Audit#104:Pull request#16openedbyboxlinknet
  ci/auto-tag-skip-existing

  Nov 8, 20261m 5s
  More actions for workflow run 104

• Integration tests: pause 2 s per test (API burst limit) (#15)

  completed successfully:
  Security Audit#103:Commitbf6a753pushedbyboxlinknet
  main

  Nov 7, 20261m 0s
  More actions for workflow run 103

• Integration tests: pace live API calls

  completed successfully:
  Security Audit#102:Pull request#15openedbyboxlinknet
  ci/integration-pace

  Nov 7, 202653s
  More actions for workflow run 102

• Release 0.4.0

  completed successfully:
  Security Audit#101:Commitf970289pushedbyboxlinknet
  main

  Nov 7, 20261m 11s
  More actions for workflow run 101

• Release 0.4.0

  completed successfully:
  Security Audit#100:Pull request#14openedbyboxlinknet
  release/0.4.0

  Nov 7, 202643s
  More actions for workflow run 100

• Tests: wrong-credential cases mocked, never sent to the live API

  completed successfully:
  Security Audit#99:Commit331b1c7pushedbyboxlinknet
  main

  Nov 6, 202659s
  More actions for workflow run 99