fix(security)!: harden broker deployment boundaries

[jmgilman]

Summary

• require HTTPS GitHub API URLs except loopback HTTP for local tests and reject unsafe repository path inputs
• remove Terraform-managed Lambda Function URL support and keep direct Lambda invocation as the supported runtime API
• harden Terraform release, SSM, and KMS inputs; sanitize upstream GitHub errors so raw bodies are not logged

Validation

• go test ./cmd/... ./internal/...
• go vet ./cmd/... ./internal/...
• go test -tags integration -count 1 ./internal/integration
• tofu fmt -check -recursive -diff
• tofu validate -no-color in terraform, terraform/examples/basic, terraform/examples/with-ssm-bootstrap
• tofu test -no-color
• local removed enable_function_url validation check
• tflint --init && tflint --recursive
• trivy config --severity HIGH,CRITICAL --exit-code 0 terraform
• govulncheck ./...
• npm run build
• git diff --check

BREAKING CHANGE: The Terraform module no longer accepts enable_function_url and no longer exposes a function_url output or function-url example.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	github-token-broker	080de4e	Commit Preview URL Branch Preview URL	Apr 27 2026, 03:10 PM