[ralyodio]

Adds sh1pt Actions Fleet packs: coinpay-invoice (/coinpay invoice $100 usd in SOL, /coinpay connect, /coinpay help), threatcrush-scan@2.0.2 (ThreatCrush scan on pull requests, SARIF to the Security tab).

Secrets COINPAY_API_KEY / COINPAY_BUSINESS_ID are set on the repo.

🤖 Generated with Claude Code

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[github-actions]

ThreatCrush Security Scan

0 finding(s) in the 2 file(s) this pull request changes.

Nothing in the files this pull request changes.

121 pre-existing finding(s) elsewhere in the repository — **HIGH**: 5 | **MEDIUM**: 77 | **LOW**: 39

Not introduced by this pull request.

Severity	Rule	Location
HIGH	secret-database-url	README.md:1556
HIGH	secret-database-url	README.md:1635
HIGH	js-electron-node-integration	apps/desktop/src/main.cjs:33
HIGH	js-ssrf-outbound-request	apps/web/src/proxy.ts:49
HIGH	secret-database-url	docker-compose.yml:4
MEDIUM	sql-template-interpolation	apps/api/src/atproto.ts:63
MEDIUM	sql-template-interpolation	apps/api/src/atproto.ts:101
MEDIUM	sql-template-interpolation	apps/api/src/atproto.ts:121
MEDIUM	sql-template-interpolation	apps/api/src/cloud.ts:51
MEDIUM	sql-template-interpolation	apps/api/src/cloud.ts:111
MEDIUM	sql-template-interpolation	apps/api/src/cloud.ts:126
MEDIUM	sql-template-interpolation	apps/api/src/cloud.ts:127
MEDIUM	sql-template-interpolation	apps/api/src/cloud.ts:128
MEDIUM	sql-template-interpolation	apps/api/src/cloud.ts:131
MEDIUM	sql-template-interpolation	apps/api/src/cloud.ts:161
MEDIUM	sql-template-interpolation	apps/api/src/cloud.ts:168
MEDIUM	sql-template-interpolation	apps/api/src/cloud.ts:175
MEDIUM	sql-template-interpolation	apps/api/src/handoff.ts:71
MEDIUM	sql-template-interpolation	apps/api/src/handoff.ts:84
MEDIUM	sql-template-interpolation	apps/api/src/handoff.ts:85

…and 101 more; the full set is in the SARIF artifact.

Snippets are redacted; ThreatCrush never prints matched credential material.