Files
clever-agent 64b72307d3 fix(security): Add REST API restrictions to automation-tracking-manager
- Block POST requests to label creation endpoints (/orgs/*/labels and /repos/*/labels)
- Still allow adding existing labels to issues (/repos/*/issues/*/labels)
- This ensures automation-tracking-manager cannot create new labels via REST API
- Maintains the ability to add the 'Automation Tracking' label to issues

This closes the security gap where curl access could bypass label creation restrictions.
2026-04-09 17:12:17 +00:00
..