/example.com'` - Matches both `http://` and `https://` protocols
* `'chrome-extension://*'` - Matches any Chrome extension URL
* **Security**: Wildcards in TLD (e.g., `example.*`) are **not allowed** for security
* Use list like `['*.google.com
Steady7 mentions in 2 weeks
No other project uses it yet
120k5mo agoReviewMountCreate a free account to mount
line scripts in `bash` commands.
- Never commit unless the user asks.
## Dependency and Install Security
- Treat npm dep and lockfile changes as reviewed code. Direct registry deps, including internal workspace
119k3mo agoReviewMountCreate a free account to mount
parallel fan-out with a merge step** — used by `/ship` to run `code-reviewer`, `security-auditor`, and `test-engineer` concurrently and synthesize their reports. Do not build a "router" persona
Steady37 mentions in 2 weeks
1 project uses a version of this
112k1d agoReviewMountCreate a free account to mount
fresh install, run `npm rebuild husky && npx husky` once.
- Adding or updating dependencies is security-sensitive; `package-lock.json` is checked by `lockfile-lint` for npm HTTPS hosts and integrity hashes.
- Package
109k5d agoReviewMountCreate a free account to mount
complements
`CLAUDE.md`; scoped `AGENTS.md` files may add local rules but must not weaken the
security, evidence, or release requirements here.
RuView is a camera-free RF perception system. Production Rust
1 project uses a version of this
102k8mo agoReviewMountCreate a free account to mount
English content
- Build processes may be slow on first run (npm install, Vite build)
## Security Considerations
### Environment Variables
- API keys should never be committed to repository
- Use `.env` files (already
No other project uses it yet
97k13mo agoReviewMountCreate a free account to mount
English content
- Build processes may be slow on first run (npm install, Vite build)
## Security Considerations
### Environment Variables
- API keys should never be committed to repository
- Use `.env` files (already
97k13mo agoReviewMountCreate a free account to mount
focus on English
- Build steps fit slow for first time (npm install, Vite build)
## Security Considerations
### Environment Variables
- API keys no suppose commit to repository
- Use `.env` files (already
97k13mo agoReviewMountCreate a free account to mount
போது தேடலில் மொழிபெயர்ப்புகளை தவிர்க்கவும்
- முதலாவது இயக்கத்தில் கட்டுமான செயல்முறைகள் மெதுவாக இருக்கலாம் (npm install, Vite கட்டிடம்)
## Security Considerations
### Environment Variables
- API மேலதிக விசைகளின் GitHub கோப்பகத்தில் கட்-பிடிக்க கூடாது
- `.env` கோப்புகளை பயன்படுத்தவும் (`.gitignore
97k13mo agoReviewMountCreate a free account to mount
nilalaman
- Maaaring mabagal ang build processes sa unang takbo (npm install, Vite build)
## Security Considerations
### Mga Environment Variable
- Huwag kailanman i-commit ang API keys sa repositoryo
- Gumamit
97k13mo agoReviewMountCreate a free account to mount
guide conflicts with the requested change, **refuse the
change and explain why**.
Security reviewers should start with [`SECURITY.md`](SECURITY.md),
[`docs/usage/security.md`](docs/usage/security.md), and
[`docs/contributing/vulnerability_management.md`](docs/contributing/vulnerability_management.md)
for the project security policy, threat
No other project uses it yet
96k4d agoReviewMountCreate a free account to mount
burying branching in shell fragments.
## Fork PR approval
`fork-pr-workflow-approval.yml` and `scripts/approve-fork-pr-workflows.ts` are a separate security boundary. They may approve low-risk fork PR `pull_request` runs, but must not approve
Steady17 mentions in 2 weeks
No other project uses it yet
96k5mo agoReviewMountCreate a free account to mount
docker:down`
- **View logs**: `task docker:logs`
- **Example compose files**: Located in `exampleYmlFiles/` directory
### Security Mode Development
Set `DOCKER_ENABLE_SECURITY=true` environment variable to enable security features during development
Steady11 mentions in 2 weeks
No other project uses it yet
96k9d agoReviewMountCreate a free account to mount
creation date.
If age cannot be established, report the missing evidence rather than guess.
- Security updates can bypass Dependabot cooldown. An urgent exception needs
explicit maintainer approval recorded
Steady2 mentions in 2 weeks
No other project uses it yet
92k1d agoReviewMountCreate a free account to mount
home-assistantPipes a download into a shellAGENTS.md
executed at runtime.
- Sensitive service actions, i.e. those that can change configuration or have security implications, should require an admin user. Register them with the `async_register_admin_service` service
No other project uses it yet
92k12d agoReviewMountCreate a free account to mount