5 Commits

Include renames

Author	SHA1	Message	Date
Latte	421a6507c0	fix: redact a data field in Action secret responses; test: secret echo suite	2026-10-14 17:46:11 +02:00
Latte	5b622e64e2	fix: redact stored webhook authorization headers and other secret fields by key name (SEC-02)	2026-10-14 17:08:59 +02:00
Latte	ce5ae6caa5	fix: redact identity secrets through a public hook and mask issued agm_ tokens ... Identity gains a redact field that the executor honours, so the OAuth resolver no longer needs an executor subclass overriding private internals. Opaque agm_ tokens issued by our authorization server are now masked by the secret patterns wherever they appear in content.	2026-10-14 16:45:36 +02:00
Latte	156e963e21	fix: key slash encoding on route, redact more request secrets, bound JSON depth and uploads ... Slash safety is decided per (path template, parameter) so single-segment routes such as releases/tags/{tag} and editorconfig/{filepath} keep %2F. Adds authorization_header, remote_password, mirror_password, mirror_token and the AWS key fields to the redacted request fields. Deeply nested JSON from Gitea is treated as text instead of raising RecursionError, and base64 uploads are capped before decoding.	2026-10-14 16:08:42 +02:00
Latte	9e50859133	feat: add Gitea request executor with result envelope, pagination and redaction	2026-10-14 15:55:56 +02:00