feat: security scanning API + pre-receive hook blocking (#692) #711

2026-06-28T07:15:38Z

jmiller commented

2026-06-28 07:15:38 +00:00

Closed — branch had cross-contamination from parallel agent collision. Replaced by new PR from clean branch.

jmiller added 4 commits 2026-06-28 07:15:40 +00:00

feat(orgs): auto-create default teams on org creation (#513 ) b94f41b597

New organizations now get three default teams in addition to Owners:
- Developers (write: code, issues, PRs, wiki, projects; read: releases)
- Reviewers (read: code, issues, PRs, releases, wiki)
- CI/CD (write: actions, packages, releases; read: code)

Teams are defined in DefaultOrgTeams and created inside the same
transaction as the org, so creation is atomic.

Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd

feat: add issue status presets and cross-org migration (#507 ) 965abb54b8

4 built-in presets: default, software-development, support-tickets,
bug-tracking. API endpoints to list presets, apply to org, and copy
statuses between orgs. Web UI dropdown on org settings page.

Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd

feat: cascade merge — auto-create PRs to downstream branches after merge (#460 ) ecc1f20162

Adds configurable cascade rules per repo. When a PR merges into a
source branch, the system auto-creates PRs to each configured target
branch. Skips if a matching PR already exists.

- Model: CascadeMergeRule (repo_id, source, target, enabled, auto_merge)
- Migration v362 creates cascade_merge_rule table
- Notifier hooks into MergePullRequest/AutoMergePullRequest events
- API: CRUD at /repos/{owner}/{repo}/cascade_rules (admin only)

Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd

feat: security scanning API endpoints + pre-receive hook blocking (#692 )

PR RC Release / Build RC Release (pull_request) Successful in 2s

Details

Generic: Project CI / Lint & Validate (pull_request) Successful in 37s

Details

Universal: PR Check / Branch Policy (pull_request) Successful in 1s

Details

Branch Cleanup / Delete merged branch (pull_request) Has been skipped

Details

RC Revert / Rename rc/ back to dev/ (pull_request) Has been skipped

Details

Universal: PR Check / Validate PR (pull_request) Failing after 9s

Details

Universal: PR Check / Secret Scan (pull_request) Successful in 50s

Details

Universal: Auto Version Bump / Version Bump (push) Successful in 14s

Details

Generic: Project CI / Tests (pull_request) Has been cancelled

Details

Universal: PR Check / Build RC Package (pull_request) Has been cancelled

Details

Universal: PR Check / Report Issues (pull_request) Has been cancelled

Details

240fe1ebe5

Add REST API for security alerts (list, get, update status, trigger scan)
and scanner config (get, update). Wire block_on_push into the pre-receive
hook so pushes containing detected secrets are rejected with details.

Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd

jmiller closed this pull request

2026-06-28 07:31:06 +00:00

jmiller referenced this pull request

2026-06-28 07:31:20 +00:00

feat: security scanning API + pre-receive hook blocking (#692) #713