fix(security): resolve all 47 CodeQL alerts - #24

Merged

bashrusakh merged 9 commits into

mainfrom

fix/codeql-security-alerts

Jun 20, 2026

Commits on Jun 19, 2026

fix(security): resolve all 47 CodeQL alerts across Go, Python, and Rust

bashrusakh
and
claude
committed
b9a6012
chore: remove stale PR review artifact

bashrusakh
and
claude
committed
08e34b4
fix(codeql): suppress legacy MD5 weak-hash alert for bcrypt migration path

bashrusakh
and
claude
committed
f0f2290
ci(codeql): upgrade to action v4, fix Go path, add cache-dependency-path

bashrusakh
and
claude
committed
140ce0d

Commits on Jun 20, 2026

fix(csrf): add {% csrf_token %} to generator form

bashrusakh
and
claude
committed
7f0756c
fix(audit): address Kilo review findings

bashrusakh
and
claude
committed
26f971e
fix(audit): broader workflow review — address existing bugs uncovered by the high-level pass

bashrusakh
and
claude
committed
d1cf47e
ci(codeql): remove custom workflow + config, fall back to GitHub default setup

bashrusakh
and
claude
committed
6815b3f
fix(audit): split B1 (workflow Bearer auth) into its own PR

bashrusakh
and
claude
committed
d0475b0