Skip to content

security: harden public gateway and enable scanning - #34

Merged
codepilotios merged 3 commits into
mainfrom
agent/security-scan-2026-07-19
Jul 19, 2026
Merged

codepilotios merged 3 commits into
mainfrom
agent/security-scan-2026-07-19

Conversation

@codepilotios

@codepilotios codepilotios commented Jul 19, 2026 •

Copy link
Copy Markdown
Owner

Summary

  • reduce unauthenticated gateway health to a liveness flag
  • keep detailed health diagnostics behind the iOS connection token
  • prevent local-web capability failures from returning backend exception details
  • add pinned CodeQL analysis for Actions, Python, Ruby, and Swift
  • add weekly Dependabot checks for Actions, SwiftPM, and Bundler
  • refresh the sanitized maintainer escalation for owner-only repository settings

Verification

  • gateway and remote-desktop unit tests
  • Swift package tests (72 passed)
  • privacy audit and privacy regression tests
  • Cloudflare, background-agent, public-write, desktop-sync, token-argument, and LaunchAgent security guards
  • workflow YAML parse and diff checks

@codepilotios codepilotios changed the title security: minimize public health diagnostics security: harden public gateway and enable scanning Jul 19, 2026
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@codepilotios
codepilotios marked this pull request as ready for review July 19, 2026 07:37
@codepilotios
codepilotios merged commit 30e310e into main Jul 19, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants