chore: prepare the repository for prf#1256
Merged
HardeepAsrani merged 6 commits intodevelopmentfrom Mar 2, 2026
Merged
Conversation
Contributor
|
💂♂️ PR Error! No Linked Issue found. Please link an issue or mention it in the body using #<issue_id> |
Contributor
Contributor
|
🎉 This PR is included in version 3.11.15 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This pull request introduces a comprehensive workflow and documentation for conducting automated WordPress security audits on this repository, with a strong focus on reproducibility, clarity, and separation of audit artifacts from distribution builds. The changes include detailed step-by-step audit instructions, a robust audit guide, environment configuration files, and updates to ignore files to prevent audit-related files from being included in plugin distributions.
Security Audit Automation and Documentation:
.claude/commands/security-audit.mdand.claude/security-audit.mdto provide detailed, step-by-step instructions and a thorough guide for performing a fully automated WordPress security audit, including environment setup, vulnerability detection, triage, proof-of-concept (PoC) generation, exploit validation, and report writing. [1] [2].wp-env.jsonwith pre-configured WordPress and PHP versions, plugin mounting, and debug settings to standardize the local development and testing environment for audits.Distribution and Artifact Management:
.distignoreto exclude.wp-env.json, the.claudedirectory (where audit scripts and guides reside), and related artifacts from release/distribution builds, ensuring only production code is shipped.cypressandcypress.jsonfrom.distignoreto streamline the artifact list.Project Documentation Improvements:
AGENTS.mdwith a clearer, more user-focused overview of the Visualizer plugin, including supported chart types, data sources, export formats, and a summary of pro features, to better orient contributors and audit agents.