Secure workspace
GitHub OAuth is not configured. Set GITHUB_OAUTH_CLIENT_ID, GITHUB_OAUTH_CLIENT_SECRET, and GITHUB_OAUTH_CALLBACK_URL.
Audit logs, scoped GitHub tokens, and Docker-isolated repo execution are built into every run.
