Repository navigation
Audit: Guardrails & observability fixes #290
Description
Summary
Forensic architectural audit identified several operational gaps. This issue tracks PR #1 (guardrails).
Fixes in this issue
- RISK-002 (Sev-2):
processCommitCmdusesexecSyncwith SHA interpolation — replace withexecFileSync - RISK-003 (Sev-2):
npm run lintis dead — ESLint 9 requires flat config, none exists - RISK-006 (Sev-3): No test coverage reporting in CI
Backlog (follow-up issues)
- FIX-004: Document GITMIND_AGENT security model
- FIX-007: Update README.md to v4.0.1 (M12/M13 features undocumented)
- FIX-008: Update GUIDE.md with
content,extension,set/unsetcommands - FIX-009:
npm audit fixfor dev dependencies (6 CVEs, all dev-only)
Audit Report
Full report at ~/git/JAMES_ROSS_REPORTS/audit/git-mind/AUDIT_REPORT.md
Activity
chore: add eslint flat config (#290)
fix: use execFileSync for git commands in processCommitCmd (#290)
ci: add lint and coverage to CI pipeline (#290)
fix: harden eslint config and resolve all lint violations (#290)
ci: add coverage reporting and npm cache to CI pipeline (#290)
fix: validate SHA with rev-parse before git log in processCommitCmd (#…
fix: replace all execSync with execFileSync to eliminate shell inject…
fix: address CodeRabbit round-2 feedback (#290)
Merge pull request #291 from flyingrobots/chore/audit-guardrails