mirror of
https://github.com/mudler/LocalAI.git
synced 2026-11-06 12:33:16 -05:00
The GitHub add-on made "GitHub" a provider name, so the test flagged three strings that name the service itself: the OAuth sign-in button, the footer link to the project repository and the "GitHub releases" package source in the egress registries hint. None of them names the add-on, so add narrow, reasoned allow-list entries for exactly those keys. Assisted-by: Claude:claude-sonnet-5-5 node npm