claude-codeandClaude Opus 5.5
1c74aaddd4
The browser check of the unchanged page found one failure: the copyright, imprint and privacy links of the framed views turn the view blank. It is planned as a follow-up, since this PR changes no behaviour. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
33 lines
969 B
TOML
33 lines
969 B
TOML
# werkrevisor rules for werkkompass; werkrevisor reads this file at the head of the default branch, never from a PR,
|
|
# and every change of it needs a human review.
|
|
|
|
[path_judge]
|
|
# One static HTML file with plain JavaScript; the frontend template is the closest one.
|
|
risk_template = "typescript-frontend"
|
|
|
|
# The page has no login, no tokens, no backend API and no forms that submit data.
|
|
[[risk.categories]]
|
|
name = "token_handling"
|
|
action = "off"
|
|
|
|
[[risk.categories]]
|
|
name = "csrf_credentials"
|
|
action = "off"
|
|
|
|
[[risk.categories]]
|
|
name = "api_contract"
|
|
action = "off"
|
|
|
|
[[risk.categories]]
|
|
name = "form_data_integrity"
|
|
action = "off"
|
|
|
|
# The levels of the required checks need the human (docs/agentic-workflow.md, "Required Checks"):
|
|
# the risk analysis that sets them.
|
|
# The repository's paths replace the host's, so its paths for secrets stand here too.
|
|
[hard_yellow]
|
|
paths = [
|
|
"**/*secret*", "**/*.pem", "**/*.key", ".env*", ".envrc",
|
|
"docs/risk-analysis.md",
|
|
]
|