mirror of https://github.com/garrytan/gstack.git
11695e3aca
* fix: replace hardcoded credentials with env vars in documentation Addresses Snyk W007 (HIGH). Replaces test@example.com/password123 with $TEST_EMAIL/$TEST_PASSWORD env vars. Adds credential safety and cookie safety notes. * fix: make telemetry binary calls conditional on _TEL and binary existence Addresses Socket's 14 MEDIUM findings for opaque telemetry binary. Adds local JSONL fallback (always available, inspectable). Remote binary only runs if _TEL != "off" and binary exists. * fix: pin bun install to v1.3.10 with existence check Addresses Snyk W012 (MEDIUM). Pins BUN_VERSION in browse.ts resolver, Dockerfile.ci, and setup script error message. Adds command -v check to skip install if bun already present. * docs: add data flow documentation to review.ts Addresses Socket HIGH finding (98% confidence). Documents what data is sent to external review services and what is NOT sent. * test: add audit compliance regression tests 6 tests enforce Snyk/Socket fixes stay in place: no hardcoded creds, conditional telemetry, version-pinned bun, untrusted content warning, data flow docs, all SKILL.md telemetry conditional. * refactor: remove 2017 lines of dead code from gen-skill-docs.ts The Placeholder Resolvers section (lines 77-2092) contained duplicate functions that were superseded by scripts/resolvers/*.ts. The RESOLVERS map from resolvers/index.ts is the sole resolution path. Verified: zero call sites outside self-references. * chore: regenerate SKILL.md files from updated templates Reflects: conditional telemetry, version-pinned bun install, untrusted content warning after Navigation commands. * chore: bump version and changelog (v0.12.12.0) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| gstack/agents | ||
| gstack-autoplan/agents | ||
| gstack-benchmark/agents | ||
| gstack-browse/agents | ||
| gstack-canary/agents | ||
| gstack-careful/agents | ||
| gstack-connect-chrome | ||
| gstack-cso/agents | ||
| gstack-design-consultation/agents | ||
| gstack-design-review/agents | ||
| gstack-document-release/agents | ||
| gstack-freeze/agents | ||
| gstack-guard/agents | ||
| gstack-investigate/agents | ||
| gstack-land-and-deploy/agents | ||
| gstack-office-hours/agents | ||
| gstack-plan-ceo-review/agents | ||
| gstack-plan-design-review/agents | ||
| gstack-plan-eng-review/agents | ||
| gstack-qa/agents | ||
| gstack-qa-only/agents | ||
| gstack-retro/agents | ||
| gstack-review/agents | ||
| gstack-setup-browser-cookies/agents | ||
| gstack-setup-deploy/agents | ||
| gstack-ship/agents | ||
| gstack-unfreeze/agents | ||
| gstack-upgrade/agents | ||