93ecc1a6f8
Some checks failed
✅ Check / 🔬 ESLint (push) Failing after 21s
✅ Check / 🏷️ Typecheck (push) Failing after 11s
✅ Check / 🔎 Test (push) Failing after 11s
✅ Check / e2e-test (push) Failing after 11s
✅ Check / 🔨 Build (push) Failing after 11s
🚀 Deploy / 🚀 Deploy (doc) (push) Failing after 12s
🚀 Deploy / 🚀 Deploy (demo) (push) Failing after 12s
🚀 Deploy / 🚀 Deploy (supabase) (push) Failing after 18s
19 lines
467 B
Markdown
19 lines
467 B
Markdown
---
|
|
paths: []
|
|
---
|
|
|
|
# Security Review Triggers
|
|
|
|
Always dispatch SECURITY-REVIEWER when the diff touches any of:
|
|
|
|
- Authentication or authorization code
|
|
- User input handling (forms, URL params, request body)
|
|
- Database queries or migrations
|
|
- File system operations
|
|
- External API calls
|
|
- Cryptographic operations
|
|
- Payment or financial code
|
|
- Supabase RLS policies
|
|
|
|
When in doubt: dispatch SECURITY-REVIEWER. False positives are cheap,
|
|
missed vulnerabilities are not. |