Tam Nhu Tran b528bcbf35 fix(ci): address code review findings for hardened AI review ...

Workflow fixes:
- Use randomized heredoc delimiter to prevent output injection
- Add file existence guard with fallback inline prompt
- Use direct cat instead of echo variable (preserves content exactly)

Prompt fixes:
- Add 4 missing CCS rules: TTY/NO_COLOR, idempotent installs,
  dashboard parity, documentation mandatory
- Qualify suppression list to exclude security/correctness/CCS concerns
- Change severity labels from Critical/Medium/Low to High/Medium/Low
  to match maintainer feedback loop parser expectations

2026-03-16 07:38:39 -04:00

..

ai-review.yml

fix(ci): address code review findings for hardened AI review

2026-03-16 07:38:39 -04:00

ci.yml

fix(ci): remove maintainability baseline gate blocking releases

2026-03-11 10:52:30 +07:00

deploy-ccs-worker.yml

fix(ci): add path filtering to deploy-ccs-worker pull request trigger

2025-12-04 15:51:36 -05:00

dev-release.yml

fix(ci): remove maintainability baseline gate blocking releases

2026-03-11 10:52:30 +07:00

docker-release.yml

fix(docker): harden release image publishing

2026-03-15 13:28:44 -04:00

label-pending-release.yml

fix(ci): prevent shell injection from PR body markdown

2025-12-13 23:31:52 -05:00

publish-npm.yml.deprecated

feat(release): implement semantic versioning automation with conventional commits

2025-11-30 18:56:02 -05:00

release.yml

fix(ci): remove maintainability baseline gate blocking releases

2026-03-11 10:52:30 +07:00

sync-dev-after-release.yml

fix(ci): remove PAT dependency from release workflow checkouts

2026-03-02 21:44:16 +07:00