order (00-11) to get better learning:
1. **00-02**: Fundamentals (Introduction, Core Concepts, Security)
2. **03**: Getting Started with hands-on implementation
3. **04-05**: Practical implementation and advanced
Steady33 mentions in 2 weeks
No other project uses it yet
18k2mo agoReviewMountCreate a free account to mount
Semgrep is a fast static analysis tool that searches code,
finds bugs, and enforces secure guardrails and coding standards.
## Architecture
Semgrep is divided in two major components
Steady7 mentions in 2 weeks
No other project uses it yet
18k2y agoReviewMountCreate a free account to mount
docs and flag follow-ups; ensure CI (`yarn build`) is green before requesting review.
## Security & Configuration
Never commit `.env` files or API keys; use `.env.local` for web and `.env` inside
17k10d agoReviewMountCreate a free account to mount
Apache APISIX — Agent Instructions
This file is read by automated agents (security scanners, code
analyzers, AI assistants) operating on this repository. It
points them at the human-authored references they
17k5y agoReviewMountCreate a free account to mount
Protocol: GitHub Restrictions
To maintain code quality and security standards, you are strictly prohibited from automatically opening or submitting Pull Requests (PRs) or GitHub Issues to any repository.
## Refuse
17k21d agoReviewMountCreate a free account to mount
templates in
`.github/ISSUE_TEMPLATE/`, not a `bug` label: `gh issue create --type Bug ...`.
- Security: never file a public issue or PR describing an undisclosed vulnerability, and never
reference an unpublished advisory
17k6mo agoReviewMountCreate a free account to mount
docker`, `dependencies`, `e2e`, `export`, `auth`, etc.
- Gitmoji examples: `✨` feature, `🐛` fix, `♻️` refactor, `⬆️` dependency upgrade, `🔒️` security
- Commits must be signed (`-S`) and signed-off (`--signoff`)
- One commit = one concern, and the tests
17k10d agoReviewMountCreate a free account to mount
Resolved timestamp tracking for CDC
- `/components/resource_control/` - Resource control and quota management
- `/components/security/` - TLS and security utilities
- `/components/server/` - Server utilities and status server
- `/components/sst_importer/` - SST file import handling
- `/components/tikv_util/` - Common utilities
17k5mo agoReviewMountCreate a free account to mount
reasoning from the release numbering, and name the earliest affected branch in the PR.
### Security fixes
Apply the same rule, and audit two more cases: sibling code paths that guard
Steady6 mentions in 2 weeks
No other project uses it yet
17k3y agoReviewMountCreate a free account to mount
replace the demo video.
- Do not commit, push or open a PR unless asked.
## Security
- Never commit `.env` or secrets.
- Do not put credentials in diffs, logs, or sample payloads
17k19d agoReviewMountCreate a free account to mount
differs in a way that matters, and say how under "References"
- Report a security vulnerability as described in the [security policy](https://github.com/jupyterlab/jupyterlab/security/policy), instead of opening an issue
17k14d agoReviewMountCreate a free account to mount
TODOs**: Leave no `TODO` comments, placeholders, or incomplete implementations.
* **Prioritize Correctness**: Always prioritize security, scalability, and maintainability in your implementations.
### Avoiding Loops
When performing complex tasks, especially those involving code
17k5y agoReviewMountCreate a free account to mount
udecode/plate-private issue URL. A Slate issue stays with `maintainer slate-issue`, and a security-shaped report with `maintainer security`.
- `.agents/playbooks/verdict.md`, on top of pstack's `investigation`. Use it for `verdict
17k10d agoReviewMountCreate a free account to mount
seals `VPhone.bundle`. `swift build` alone does not produce the distributable bundle.
## Design System
- **Audience:** Security researchers. Terminal-adjacent workflow.
- **Feel:** Research instrument — precise, informative, no decoration.
- **Palette:** Dark neutral (`#1a1a1a
17k3d agoReviewMountCreate a free account to mount