Promote dev → main - #19

Merged

AdrianLlopart merged 6 commits into

mainfrom

Jun 21, 2026

Commits on Jun 21, 2026

security: harden contact endpoint and promotion workflow
claude
committed
security: add HSTS + Permissions-Policy + CSP (report-only), CodeQL scanning
claude
committed
security: enforce CSP (verified in-browser against the real CDN)

AdrianLlopart
and
claude
committed
Merge pull request #17 from OpenRAL/claude/security-audit-public-repo-3l282d
AdrianLlopart
authored
ci: drop codeql.yml — managed "Code quality" default setup owns code scanning

AdrianLlopart
and
claude
committed
Merge pull request #18 from OpenRAL/claude/security-audit-public-repo-3l282d
AdrianLlopart
authored