Repository navigation

fix(create-bestax): reject dot-only project names, pin icon versions, bundle bestax-icons skill - #310

Merged

allxsmith merged 9 commits into

mainfrom

claude/bestax-security-review-4j1549

Jul 15, 2026

Commits on Jul 15, 2026
- fix(create-bestax): reject project names that are dots or start with a dot
  
  claude
  authored and
  allxsmith
  committed
  2c15b68
- fix(create-bestax): pin icon library versions instead of latest
  
  claude
  authored and
  allxsmith
  committed
  7bff096
- fix(create-bestax): bundle the bestax-icons skill referenced by the generated CLAUDE.md
  
  claude
  authored and
  allxsmith
  committed
  bc6e0cd
- ci: pass untrusted input via env and sanitized outputs in test-deploy and verified-commit
  
  claude
  authored and
  allxsmith
  committed
  8db2115
- ci: add live collaborator re-check and persist-credentials false to claude.yml
  
  claude
  authored and
  allxsmith
  committed
  696abe7
- ci: move workflow permissions to per-job blocks and drop writes from CI PR path
  
  claude
  authored and
  allxsmith
  committed
  35c8ec7
- chore: add CODEOWNERS requiring owner review on .github changes
  
  claude
  authored and
  allxsmith
  committed
  3cbc6c8
- ci: derive the find name-glob from file-pattern in verified-commit
  
  allxsmith
  and
  claude
  committed
  253e100
- ci: guard find's positional arg against leading-dash patterns
  
  allxsmith
  and
  claude
  committed
  5c661d2