go/pkg/ratelimit
Claude bde00e40f4
fix(security): move Gemini API key from URL query params to header (#47)
Pass the API key via x-goog-api-key HTTP header instead of the URL
query parameter to prevent credential leakage in proxy logs, web
server access logs, and monitoring systems.

Resolves: #47 (CVSS 5.3, OWASP A09:2021)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-12 20:29:09 +00:00
..
ratelimit.go fix(security): move Gemini API key from URL query params to header (#47) 2026-02-12 20:29:09 +00:00
ratelimit_test.go feat(agentci): rate limiting and native Go dispatch runner 2026-02-10 03:08:16 +00:00