From c0bdd6b5e50ed6043daf67ddc87e44ba4bb13756 Mon Sep 17 00:00:00 2001
From: Dan Lorenc <dlorenc@chainguard.dev>
Date: Sat, 9 May 2026 12:04:29 -0400
Subject: [PATCH] audit(server): confirm nil-slice guards in all list endpoints

Full audit of all list endpoints in internal/server/ for nil-slice
serialization. All locations flagged in the task already have the
correct guard pattern:

  if x == nil { x = []T{} }

Verified locations:
- handlers_branches.go:40  branches slice
- handlers_ci.go:89        Jobs field (ListCIJobsResponse)
- handlers_events.go:109   Subscriptions field (ListSubscriptionsResponse)
- handlers_orgs.go:55      Orgs field (ListOrgsResponse)
- handlers_orgs.go:102     Repos field (ReposResponse)
- handlers_orgs.go:171     Members field (OrgMembersResponse)
- handlers_orgs.go:340     Invites field (OrgInvitesResponse)
- handlers_proposals.go:136 reviews slice
- handlers_proposals.go:161 checkRuns slice
- handlers_proposals.go:260 comments slice
- handlers_proposals.go:359 proposals slice
- handlers_releases.go:104  Releases field (ListReleasesResponse)
- handlers_files.go:66      entries slice (handleTree)
- handlers_files.go:172     entries slice (handleFileHistory)
- handlers_files.go:378     entries slice (handleChain)

go build ./... and go vet ./... both clean. All tests pass.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>