Commit Graph
4 Commits
Author SHA1 Message Date
SatoshiQaziMuhammed bd0b7989fe ci(security): exempt the TruffleHog action from the AGPL licence denial
Pinning the action made dependency review evaluate it for the first time.
It runs unmodified in CI and is not linked into or shipped with anything.
2026-10-17 21:16:49 +04:00
SatoshiQaziMuhammed 429140ab20 ci(security): scan new commits on push/PR and the current tree weekly
`base: main` made every push to main rescan the whole history, where Nova's
own Infura keys are still live, so Secret Scan was red on every push and a
new leak would have read as the same old red.

- push and pull_request: no `base`, so the action scans only the commits the
  event brings
- schedule: scan a `git archive HEAD` copy of today's tree
- pin the action to v3.99.2 by commit and the image to 3.99.2 (was @main and
  latest)
2026-10-17 21:05:28 +04:00
SatoshiQaziMuhammed b616ca23d6 Merge pull request #15 from pezkuwichain/fix/fcm-token-retry
fix(push): retry FCM token requests instead of failing on the first timeout
2026-07-31 20:54:09 -07:00
SatoshiQaziMuhammed 0603e079e2 Merge PR #14: Support first-signer case for /open/multisigOperation deep link
Support first-signer case for /open/multisigOperation deep link
2026-07-18 22:59:55 -07:00