pjandro/OmniRoute
1
0
Fork 0
mirror of https://github.com/diegosouzapw/OmniRoute.git synced 2026-09-19 13:23:50 +03:00
Code Issues Packages Projects Releases Wiki Activity

docs(dependencies): clarify socket.yml is registry-side scan, not CI gate (#12664)

Browse Source 
* docs(dependencies): clarify socket.yml is registry-side scan, not CI gate

* docs(dependencies): add changelog fragment for socket.yml scope note

Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>

---------

Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>
This commit is contained in:
Juri
2026-09-18 17:22:09 +02:00
committed by GitHub
parent 6e74739607
commit db5ae3c33d
4 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
socket.yml
View File

@@ -1,6 +1,12 @@
# Socket.dev / Socket GitHub app configuration.
# Documentation: https://docs.socket.dev/docs/socket-yml
#
# NOTE: This file does NOT enforce a CI/PR gate. No workflow in
# .github/workflows, no package.json script, and no Makefile target invokes
# Socket.dev. It only shapes `projectIgnorePaths` for Socket's registry-side
# post-publish scan of the published npm artifact (see
# docs/security/SOCKET_DEV_FINDINGS.md).
#
# OmniRoute bundles privileged opt-in features (MITM proxy, Zed credential
# import, embedded service supervisor, Cloud Sync) inside the Next.js
# standalone build output. The v3.8.6 release applies in-tree mitigations for