Snider 40d2b0db16 fix: address Codex round 7 — path traversal + dispatch check ... High/Security: sanitise input.Repo via filepath.Base to prevent path traversal in workspace prep (../escape from CODE_PATH). High/Security: sanitise repo.Repo from API response in syncRepos to prevent path traversal via crafted checkin responses. Medium: dispatchFixFromQueue now returns error, review_queue checks success before recording fix_dispatched. Known issues updated with async bridge provider findings. Co-Authored-By: Virgil <virgil@lethean.io>		2026-03-21 17:25:23 +00:00
..
harvest.go	fix: address Codex round 4 findings	2026-03-21 16:36:26 +00:00
harvest_test.go	test(monitor): add harvest and channel notification tests	2026-03-21 13:21:23 +00:00
monitor.go	fix: address Codex round 5 findings — 2 high, 5 medium, 4 low	2026-03-21 16:53:55 +00:00
monitor_test.go	fix: address Codex round 2 mediums	2026-03-21 16:05:59 +00:00
sync.go	fix: address Codex round 7 — path traversal + dispatch check	2026-03-21 17:25:23 +00:00