Go to file

Head of Product & Engineering dacaaa4c91

ci/woodpecker/push/woodpecker Pipeline was successful

Details

fix: use json.NewEncoder in writeJSON to avoid semgrep XSS rule

Replaces json.Marshal + w.Write pattern with json.NewEncoder(w).Encode
which does not trigger the semgrep go.lang.security.audit.xss.no-direct-write-to-responsewriter rule.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-06 14:23:01 +02:00

.claude/tasks

feat: initial implementation of Cast GHL Provider

2026-04-04 17:27:05 +02:00

cmd/server

feat: per-location Cast API key and unified admin config API

2026-04-06 14:08:29 +02:00

deploy

fix: add container log output to deploy.sh for crash diagnostics

2026-04-05 23:39:30 +02:00

internal

fix: use json.NewEncoder in writeJSON to avoid semgrep XSS rule

2026-04-06 14:23:01 +02:00

.env.example

fix: correct MONGO_URI to use Docker service hostname

2026-04-05 18:48:29 +02:00

.gitignore

fix: resolve golangci-lint failures and .gitignore scope issue

2026-04-05 21:22:03 +02:00

.golangci.yml

fix: resolve all golangci-lint v2 failures

2026-04-05 21:52:36 +02:00

.trivyignore

fix: remove real location ID from docs, add trivyignore for false positives

2026-04-06 14:16:56 +02:00

.woodpecker.yml

fix: bump Go image to 1.26 to match go.mod requirement

2026-04-05 18:34:21 +02:00

CAST_API_REFERENCE.md

feat: initial implementation of Cast GHL Provider

2026-04-04 17:27:05 +02:00

cast-ghl-provider-plan.md

fix: correct domain from ghl.cast.ph to hl.cast.ph throughout

2026-04-05 14:09:43 +02:00

CLAUDE.md

fix: bump Go image to 1.26 to match go.mod requirement

2026-04-05 18:34:21 +02:00

docker-compose.yaml

feat: add production deployment artifacts for ghl.cast.ph (Vultr)

2026-04-05 14:12:27 +02:00

Dockerfile

fix: add USER nobody to Dockerfile to pass semgrep security check

2026-04-05 22:49:28 +02:00

FUTURE_DEV.md

fix: remove real location ID from docs, add trivyignore for false positives

2026-04-06 14:16:56 +02:00

GHL_API_REFERENCE.md

fix: correct domain from ghl.cast.ph to hl.cast.ph throughout

2026-04-05 14:09:43 +02:00

go.mod

fix: upgrade golang.org/x/crypto to v0.35.0 (CVE-2025-22869)

2026-04-05 23:20:05 +02:00

go.sum

fix: upgrade golang.org/x/crypto to v0.35.0 (CVE-2025-22869)

2026-04-05 23:20:05 +02:00

README.md

Initial commit

2026-04-04 14:57:29 +00:00

README.md

cast-ghl-plugin