issues Search Results · language:Dune language:JavaScript language:JavaScript language:JavaScript is:public language:Java
Filter by
33.3M results
Summary
The DAGGER_INSTALL_COMMANDS constant downloads install.sh from dl.dagger.io over HTTPS and pipes it directly to sh at
task runtime with no version pin, no checksum, and no signature verification. ...
area/plugin
kind/security
Summary
The class is annotated with Lombok @ToString (line 24) but the apiKey field (line 33) is not annotated with
@ToString.Exclude. The Kestra Property String class (io.kestra.core.models.property.Property) ...
area/plugin
kind/security
Auth logic is scattered. Centralize into a dedicated middleware.
Generated for enterprise-scale GitHub performance testing.
Repository: platform-core Booster Run ID: boost-20260625-121619 Sequence: 347 ...
P2-medium
perf-test
security
Summary
All three classes that hold the AMQP password field are annotated with Lombok @ToString without any @ToString.Exclude on
the password field and without callSuper=false or onlyExplicitlyIncluded=true. ...
area/plugin
kind/security
Summary
The env field (Property Map String,String ) is the primary mechanism for passing secrets such as CLOUDQUERY_API_KEY,
AWS_ACCESS_KEY_ID, and AWS_SECRET_ACCESS_KEY into the CloudQuery process, as ...
area/plugin
kind/security
Summary
The readArchive method calls entry.getName() and applies only a space-to-underscore replacement before passing the
result to runContext.workingDir().createFile(sanitizedName). An archive entry ...
area/plugin
kind/blocker
kind/security
Summary
The config field of type Object holds Docker configuration (typically a JSON string matching ~/.docker/config.json,
which contains base64-encoded registry credentials in its auths section). The ...
area/plugin
kind/security
Summary
AbstractConfluenceTask is annotated with @ToString but neither the username nor apiToken fields (both
@PluginProperty(secret=true)) are annotated with @ToString.Exclude. Lombok will include both ...
area/plugin
kind/security
Problem
The admin dashboard currently does not provide a course completion rate metric, making it difficult to track overall
learner progress.
Requirements
Implement the backend logic to calculate the ...
backend
Authorization checks inconsistent. Audit and harden RBAC rules.
Generated for enterprise-scale GitHub performance testing.
Repository: platform-core Booster Run ID: boost-20260625-121619 Sequence: 346 ...
P2-medium
perf-test

Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.