NotAShelf aa4ebf2f5b various: harden input validation; add SSRF protection; fix default API key role ... Default API key role was "admin", which was something that I forgot to fix during testing. We change it to "read-only". Additionally repository URLs now reject `file://` scheme (another testing artifact) localhost, private IP ranges, and cloud metadata endpoints. Nix expressions reject path traversal (`..`) and absolute paths. Validation is called at the evaluator endtrypoint before command construction. Signed-off-by: NotAShelf <raf@notashelf.dev> Change-Id: I35729c6aa9ec4ff8d1ea19bd57ea93646a6a6964		2026-02-15 23:37:49 +03:00
..
src	various: harden input validation; add SSRF protection; fix default API key role	2026-02-15 23:37:49 +03:00
tests	nix: attempt to fix VM tests; general cleanup	2026-02-15 23:37:49 +03:00
Cargo.toml	chore: format with updated rustfmt and taplo rules	2026-02-05 22:45:06 +03:00