issues Search Results · language:Dune language:JavaScript language:JavaScript language:HTML language:Java language:Java
Filter by
39.9M results
Install section omits PostgreSQL client tools (pg_dump/pg_restore) required by the headline --pg flow
- Severity: P3 (missing operational guidance)
- Problem: Install lists only node + the age binary, ...
audit-followup
documentation
P3
Masashi-Ono0611
The automated dependency branch automated/maven-dependency-updates passed build verification but pull request creation
was blocked by repository policy.
Please review the branch and create the PR manually, ...
dependency-update
github-actions[bot]
README: gbrain link in the opening sentence is a bare https://github.com/ placeholder
- Severity: P3 (docs accuracy, cosmetic)
- Problem: The first sentence links the project s defining noun, gbrain, ...
audit-followup
documentation
P3
--help is incomplete: turbo missing from the locator legend + Storage env block, and verify omits its positive control
and --identity (merges both cli-help findings)
- Severity: P3 (docs / CLI help ...
audit-followup
documentation
P3
Arweave gateway reads follow redirects (redirect: follow ), enabling blind SSRF to internal/IMDS endpoints via a
compromised mirror
- Severity: P3 (security / SSRF, blind/GET-only)
- Problem: The ...
audit-followup
P3
security
pipe2() pipelines have no overall timeout and kill children with SIGTERM only
- Severity: P3 (robustness)
- Problem: Unlike run() (which SIGKILLs a stuck child so it can t hang us forever ), pipe2() ...
audit-followup
bug
P3
--backend arweave put() buffers the whole file into one signed tx → opaque HTTP 400 on a brain-sized snapshot, yet
durability.md steers users there
- Severity: P3 (backend correctness / error UX, on ...
audit-followup
documentation
P3
Identity private key is written as a bare plaintext age key (0600 only); offer passphrase-wrapping + document FDE
- Severity: P3 (key-at-rest defense-in-depth)
- Problem: age-keygen writes an unwrapped ...
audit-followup
P3
security
Arweave JWK wallet gets weaker hygiene than the age identity (no perms check, CIPHER_BRAIN_HOME 0755, ungitignored,
under-stated as low-value) (merges: Turbo JWK bearer-key hygiene + .gitignore wallet ...
audit-followup
P3
security
Docs misrepresent the shipped arweave/turbo backends and over-claim content-addressed (merges: README Usage frames
Arweave as later + MANAGEMENT.md stale cadence/table/content-addressed overclaim)
- ...
audit-followup
documentation
P2
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.