fix(setup): per-user DATABASE_URL config + three-way DB diagnostics#58

Merged

cdeust merged 6 commits into

mainfrom

fix/db-config-hardening

Jun 9, 2026

Commits on Jun 9, 2026

fix(sec): resolve CodeQL CWE-22 path-injection (#90,#86) and weak-hash (#84)

cdeust
and
claude
committed
fix(sec): inline commonpath guard to dominate is_dir sink (CodeQL #57)

cdeust
and
claude
committed
fix(sec): break CWE-22 taint via trusted scandir descent (CodeQL #57)

cdeust
and
claude
committed
fix(setup): per-user DATABASE_URL config + three-way DB diagnostics

cdeust
and
claude
committed
style(setup): ruff format setup_db.py (subprocess args one-per-line)

cdeust
and
claude
committed
fix(ci): realign I2 writer line pins (548/608) + allow auth_failed status

cdeust
and
claude
committed