eagraiclainne/app
Watch
1
0
Fork
You've already forked app
 0
Code Issues 10 Pull requests 1 Projects Releases 19 Packages 3 Wiki Activity Actions

v1.1.0 security audit

New issue

Findings from the OWASP Top 10 (2025) audit of tag v1.1.0, run on 2026-08-13.

No due date
100% Completed
A08: add an integrity seal to backup archives
enhancement
security
severity/low
#22 by nalum was closed 2026-08-13 11:41:12 +00:00 v1.1.0
A04: scrub streaming responses in the SanitizeInterceptor
security
severity/low
#21 by nalum was closed 2026-08-13 11:38:48 +00:00 v1.1.0
A08: confirm the live cluster reconciles the cosign-verified OCIRepository
security
severity/low
1
#20 by nalum was closed 2026-08-13 11:32:02 +00:00 v1.1.0
A05: validate the update feed ReleaseUrl scheme
security
severity/low
web
#19 by nalum was closed 2026-08-13 11:38:08 +00:00 v1.1.0
A06: enforce a server-side ceiling on List RPCs
security
severity/low
#18 by nalum was closed 2026-08-13 11:38:29 +00:00 v1.1.0
A10: mask raw internal error text on CodeInternal responses
security
severity/low
#17 by nalum was closed 2026-08-13 11:39:12 +00:00 v1.1.0
A09: record security events in the audit log
security
severity/low
#16 by nalum was closed 2026-08-13 11:40:24 +00:00 v1.1.0
A07: close the Login timing oracle for unknown emails
security
severity/low
#15 by nalum was closed 2026-08-13 11:40:10 +00:00 v1.1.0
A05: add SSRF guards to webhook delivery
security
severity/medium
#14 by nalum was closed 2026-08-13 11:39:45 +00:00 v1.1.0
A03: checksum-verify downloaded toolchain binaries in CI
ci
security
severity/medium
#13 by nalum was closed 2026-08-13 11:39:26 +00:00 v1.1.0
A03: digest-pin actions/* steps in all workflows
ci
security
severity/medium
#12 by nalum was closed 2026-08-13 11:39:26 +00:00 v1.1.0
A06: cap RPC request bodies and shrink the import decompression limit
security
severity/medium
#11 by nalum was closed 2026-08-13 11:41:01 +00:00 v1.1.0
A02: add security response headers to the web surface
security
severity/medium
web
#10 by nalum was closed 2026-08-13 11:38:59 +00:00 v1.1.0
A02/A07: harden the first-boot setup window
security
severity/medium
#9 by nalum was closed 2026-08-13 11:40:41 +00:00 v1.1.0
A07: add rate limiting and lockout to password Login
security
severity/medium
#8 by nalum was closed 2026-08-13 11:39:57 +00:00 v1.1.0