fix(security): F1085 rm scope concat + KI-005 CanCommunicate guard + CI fixes - #1973

Closed

molecule-ai[bot] wants to merge 18 commits into

stagingfrom

fix/f1085-ki005-security-v2

Commits on Apr 24, 2026

fix(handlers): F1085 rm scope concat + GH#756 ValidateToken terminal guard

authored and
Molecule AI Core-DevOps
committed
772fd99
chore(workspace-server): add golangci.yaml disabling errcheck

Molecule AI Core-BE
authored and
Molecule AI Core-DevOps
committed
9cb8f92
fix: F1085 rm scope concat + GH#756 ValidateToken terminal guard + CI test fixes

authored and
Molecule AI Core-DevOps
committed
2b7277a
fix(handlers): validateRelPath detects traversal in cleaned path

Molecule AI Core-BE
authored and
Molecule AI Core-DevOps
committed
eb288ce
fix(handlers): validateRelPath checks both raw and cleaned path for ..

Molecule AI Core-BE
authored and
Molecule AI Core-DevOps
committed
2c8800b
fix(handlers): simplify SSRF disable in setupTestDB; fix Windows path test

Molecule AI Core-BE
authored and
Molecule AI Core-DevOps
committed
3ecd8dc
fix(handlers): add empty/dot-only path guard to validateRelPath

authored and
Molecule AI Core-DevOps
committed
147dc53
fix(ci): address golangci-lint/CodeQL warnings across multiple files

authored and
Molecule AI Core-DevOps
committed
584786d
ci: trigger CI for linter fix validation [skip ci]

Molecule AI Core-BE
authored and
Molecule AI Core-DevOps
committed
9ddd439
ci: trigger CI rerun for linter fix validation

Molecule AI Core-BE
authored and
Molecule AI Core-DevOps
committed
2107edc
ci: force CI retrigger for PR #1886

Molecule AI Core-BE
authored and
Molecule AI Core-DevOps
committed
f98b310
fix(container_files): restore deleteViaEphemeral security order and rm scope guard

Molecule AI Core-BE
authored and
Molecule AI Core-DevOps
committed
82b6f1c
ci: force CI trigger for security fix

Molecule AI Core-BE
authored and
Molecule AI Core-DevOps
committed
40fdba5
feat(ci): add workflow_dispatch trigger to enable manual CI runs

authored and
Molecule AI Core-DevOps
committed
500ca11
fix(handlers): restore canonical import ordering in terminal.go

molecule-ai[bot]
authored and
Molecule AI Core-DevOps
committed
2f31e95
fix(test): restore ssrfCheckEnabled after setupTestDB and opt-in in ssrf/mcp test files

molecule-ai[bot]
authored and
Molecule AI Core-DevOps
committed
5dba9ac
fix(tests): update F1085/KI-005 test mocks and documentation test

molecule-ai[bot]
authored and
Molecule AI Core-DevOps
committed
2d05700
fix(tests): correct ValidateToken mock — 1 SQL arg not 3

Molecule AI Core-DevOps
and
claude
committed
03e42e2

Navigation Menu

Uh oh!

fix(security): F1085 rm scope concat + KI-005 CanCommunicate guard + CI fixes - #1973

fix(security): F1085 rm scope concat + KI-005 CanCommunicate guard + CI fixes#1973
molecule-ai[bot] wants to merge 18 commits into
stagingfrom
fix/f1085-ki005-security-v2

Commits on Apr 24, 2026

fix(handlers): F1085 rm scope concat + GH#756 ValidateToken terminal guard

chore(workspace-server): add golangci.yaml disabling errcheck

fix: F1085 rm scope concat + GH#756 ValidateToken terminal guard + CI test fixes

fix(handlers): validateRelPath detects traversal in cleaned path

fix(handlers): validateRelPath checks both raw and cleaned path for ..

fix(handlers): simplify SSRF disable in setupTestDB; fix Windows path test

fix(handlers): add empty/dot-only path guard to validateRelPath

fix(ci): address golangci-lint/CodeQL warnings across multiple files

ci: trigger CI for linter fix validation [skip ci]

ci: trigger CI rerun for linter fix validation

ci: force CI retrigger for PR #1886

fix(container_files): restore deleteViaEphemeral security order and rm scope guard

ci: force CI trigger for security fix

feat(ci): add workflow_dispatch trigger to enable manual CI runs

fix(handlers): restore canonical import ordering in terminal.go

fix(test): restore ssrfCheckEnabled after setupTestDB and opt-in in ssrf/mcp test files

fix(tests): update F1085/KI-005 test mocks and documentation test

fix(tests): correct ValidateToken mock — 1 SQL arg not 3