KomhandClaude Fable 5 0f4ee1cdef feat: rate-limit the release hook (per-IP + global) ...

Unauthenticated /release spam could burn the PAT's 5000 req/h GitHub
quota, since every request with a valid app_id costs one authenticated
release check. Add Workers rate-limiting bindings checked before any
parsing or GitHub calls: 5/min per source IP, plus a 30/min whole-
endpoint cap that keeps even a multi-IP flood under the quota.
Counters are per Cloudflare location and eventually consistent — a
damper, not an accounting system.

Co-Authored-By: Claude Fable 5 <[email protected]>

2026-07-12 10:44:40 +08:00

..

src

feat: rate-limit the release hook (per-IP + global)

2026-07-12 10:44:40 +08:00

wrangler.jsonc

feat: rate-limit the release hook (per-IP + global)

2026-07-12 10:44:40 +08:00