feat(extensions): authenticate GitHub-hosted catalog and download requests with GITHUB_TOKEN/GH_TOKEN - #2087

Closed

anasseth wants to merge 9 commits into

github:mainfrom

anasseth:feat/github-token-auth-private-catalogs

Commits on Apr 4, 2026

feat(extensions): authenticate GitHub-hosted catalog and download requests with GITHUB_TOKEN/GH_TOKEN
anasseth
committed
147a0af

Commits on Apr 8, 2026

feat(extensions): replaced host in url substring check with proper hostname parsing & added 3 new spoofing tests -> Issue # 2037
anasseth
committed
c4ef1d1
fix(extensions): harden GitHub token auth against URL spoofing and redirect leakage -> Issue # 2037
anasseth
committed
eb4f894

Commits on Apr 9, 2026