mathias/gitea-mcp
1
0
Fork 0
Code Issues 8 Pull Requests Actions Packages Projects Releases Wiki Activity
173 Commits 4 Branches 42 Tags
d1e501cc64ec6e3417ea63a2a6240401af330ba5
Commit Graph
2 Commits
Author SHA1 Message Date
mathiasandClaude Opus 5.5 0e2bd3d90e fix(mcp): audit record keeps legacy name/index alias targets
CD / Deploy via GitOps (push) Successful in 5s
Details
CD / Lint / Test / Vet (push) Successful in 15s
Details
CD / Build & Import (push) Successful in 7s
Details 
A caller using the #38 aliases (name for repo, index for number) left no
target in the tools/call audit record.

Refs #64

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-01 20:41:51 +02:00
mathiasandClaude Opus 5.5 724a997002 feat(mcp): audit-log every tools/call (OWASP MCP08)
CD / Deploy via GitOps (push) Successful in 5s
Details
CD / Lint / Test / Vet (push) Successful in 31s
Details
CD / Build & Import (push) Successful in 14s
Details 
tools/call dispatched with no record, so repo_delete, pr_merge and
file_delete left no trail in gitea-mcp; only auth acceptance was logged.

One slog record per call: tool, caller, token fingerprint, target
(owner/repo/number/branch/path/tag), outcome, duration. Every other
argument is reduced to args_bytes so the audit line never copies file
content or issue bodies.

Closes #64

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-01 20:34:59 +02:00