codelicious: spec-v5 build — hardening & review fixes - #9

Merged

clay-good merged 11 commits into

mainfrom

codelicious/auto-build

Apr 6, 2026

Commits on Mar 28, 2026

Commits on Apr 6, 2026

refactored the orchestrator and engines to enforce a strictly managed git lifecycle, resolved 26 security vulnerabilities (SSRF, path traversal, and prompt injection), and expanded the test suite t…
clay-good
committed
4d29caa
added # nosec B311 inline suppression on that line
clay-good
committed
4fc3456
added --skip-editable to the pip-audit command in ci.yml:86
clay-good
committed
d39280b
added --exclude codelicious to pip-audit strict
clay-good
committed
0ac3ac6
use non-editable install and remove invalid --exclude flag to resolve pip-audit errors in security job
clay-good
committed
6ec1725
exclude local package 'codelicious' from pip-audit by using a filtered requirements file to prevent false positives during strict dependency checks
clay-good
committed
d650c1b
changed the grep filter from '^codelicious==' to 'codelicious' on ci.yml:87
clay-good
committed
6476e63