forked from HAL9000/cleveragents-core
64b72307d3
- Block POST requests to label creation endpoints (/orgs/*/labels and /repos/*/labels) - Still allow adding existing labels to issues (/repos/*/issues/*/labels) - This ensures automation-tracking-manager cannot create new labels via REST API - Maintains the ability to add the 'Automation Tracking' label to issues This closes the security gap where curl access could bypass label creation restrictions.