Skip to content

ci: /coinpay commands + ThreatCrush scan - #311

Merged
ralyodio merged 1 commit into
masterfrom
riotcoder/coinpay-threatcrush
Nov 11, 2026
Merged

ralyodio merged 1 commit into
masterfrom
riotcoder/coinpay-threatcrush

Conversation

@ralyodio

Copy link
Copy Markdown
Collaborator

Adds sh1pt Actions Fleet packs: coinpay-invoice (/coinpay invoice $100 usd in SOL, /coinpay connect, /coinpay help).

Secrets COINPAY_API_KEY / COINPAY_BUSINESS_ID are set on the repo.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@ralyodio
ralyodio merged commit 898765a into master Nov 11, 2026
@ralyodio
ralyodio deleted the riotcoder/coinpay-threatcrush branch November 11, 2026 07:46
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

13 finding(s)

HIGH/CRITICAL: 1 | MEDIUM: 8 | LOW: 4

Severity Rule Location
HIGH js-ssrf-outbound-request apps/web/public/sw.js:24
MEDIUM js-unescaped-html-sink apps/web/src/app/blog/[slug]/page.tsx:53
MEDIUM js-unescaped-html-sink apps/web/src/app/layout.tsx:89
MEDIUM sh-remote-script-execution scripts/dev-setup.sh:25
MEDIUM sh-eval-expansion scripts/dev-setup.sh:35
MEDIUM sh-remote-script-execution scripts/install.sh:185
MEDIUM sh-remote-script-execution scripts/install.sh:210
MEDIUM sh-remote-script-execution scripts/install.sh:408
MEDIUM sh-remote-script-execution scripts/install.sh:450
LOW py-ssrf-outbound-request examples/business-strategist-agent/chat.py:37
LOW py-ssrf-outbound-request examples/business-strategist-agent/train.py:54
LOW secret-generic-credential node/crates/c0mpute-core/src/webhook.rs:1171
LOW py-path-traversal node/crates/c0mpute-core/tests/fixtures/fake-infernet-text:29

Snippets are redacted; ThreatCrush never prints matched credential material.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant