Vincent Koc
|
1278f0bcc0
|
fix(codeql): tune Android pinning profile
Remove noisy missing-certificate-pinning query from the critical Android CodeQL profile; gateway TLS uses custom certificate fingerprint pinning.
|
2026-04-27 23:04:16 -07:00 |
|
Vincent Koc
|
2bce63cb65
|
fix(android): harden canvas webview bridge (#73240)
* fix(android): harden canvas webview bridge
* fix(android): make canvas content access hardening explicit
* fix(android): keep webview hardening inline for CodeQL
* fix(android): avoid webview getter false positive
|
2026-04-27 21:41:01 -07:00 |
|
Vincent Koc
|
74eccd42d8
|
fix(ci): add android CodeQL security shard
Add a manual Android CodeQL security shard scoped to app production sources. Verified with profile=android-security on Blacksmith in 4m22s.
|
2026-04-27 12:32:55 -07:00 |
|