Jeffrey von Rotz 86f610be05 feat: security fix + golden-standard README ...

* fix: Dockerfile CMD path and chown for Docker proxy support

* chore: remove legacy codeql.yml (ADR-011 GHAS migration)

* chore: remove legacy gitleaks.yml (ADR-011 GHAS migration)

* docs: add TOOLS.md with tool documentation

* fix(security): update lock file — hono 4.12.3 + SDK 1.27.1 (#4)

Updated transitive deps to patched versions:
- @modelcontextprotocol/sdk: 1.26.0 -> 1.27.1
  (cross-client data leak via shared transport, affects 1.10.0-1.25.3,
  patched in 1.26.0)
- hono: 4.12.0 -> 4.12.3
  (authentication bypass via IP spoofing, patched in 4.12.3)

No package.json change needed — existing semver ranges already allow
the patched versions.

* docs: golden-standard README (#5)

Brings README to production golden standard following the Ansvar Law MCP template.

2026-03-02 20:25:22 +00:00

154 KiB

Raw Blame History

View Raw