mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
f937e5595c
The search API was called anonymously on a 10 requests/minute limit while the workflow already had a token; send it as an Authorization header, never in the URL, and never print it. Dropping the token from the origin remote also stops it being written into .git/config on the runner, since actions/checkout already provides push credentials. Rewrite on urllib so the job installs nothing, retry rate limits and 5xx, and fail loudly instead of silently publishing a README with a year missing. Repository text is flattened so a pipe cannot break the table.