Files
insomnia/packages
Bob QiuandClaude Sonnet 5 7756e2c5da fix: address CodeQL/Aikido findings on e2e test workflows
- Restrict GITHUB_TOKEN to contents:read at the workflow level in
  insomnia-test.yml and playwright.yml
- Pin peaceiris/actions-gh-pages to a commit hash instead of a mutable tag
- Cap the x-reply-delay-ms test header to 60s in echo-server.js,
  event-stream-server.js, and mcp-server.js to avoid unbounded timers

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-24 13:27:22 +08:00
..