fix: deliver the security review findings, and correct its headline - #15

Merged

aicayzer merged 6 commits into

mainfrom

security/review-fixes

Aug 20, 2026

Commits on Aug 20, 2026

fix: validate the pool name at register
aicayzer
committed
035c3ef
fix: do not cache a failed runner download as if it succeeded
aicayzer
committed
44a57ca
fix: stop a slow tick from overlapping the next one
aicayzer
committed
d4df674
fix: create the config mode 0600
aicayzer
committed
ec2959b
fix: fail closed on unresolvable visibility, and warn on org runner groups
aicayzer
committed
6e38520
docs: add SECURITY.md, and stop claiming more than the code does
aicayzer
committed
72172ae