Skip to content

issues Search Results · language:Dune language:JavaScript language:JavaScript language:JavaScript is:public language:Java

Filter by

33.3M results  (646 ms)

33.3M results

Summary The DAGGER_INSTALL_COMMANDS constant downloads install.sh from dl.dagger.io over HTTPS and pipes it directly to sh at task runtime with no version pin, no checksum, and no signature verification. ...
area/plugin
kind/security

Summary The class is annotated with Lombok @ToString (line 24) but the apiKey field (line 33) is not annotated with @ToString.Exclude. The Kestra Property String class (io.kestra.core.models.property.Property) ...
area/plugin
kind/security

Auth logic is scattered. Centralize into a dedicated middleware. Generated for enterprise-scale GitHub performance testing. Repository: platform-core Booster Run ID: boost-20260625-121619 Sequence: 347 ...
P2-medium
perf-test
security

Summary All three classes that hold the AMQP password field are annotated with Lombok @ToString without any @ToString.Exclude on the password field and without callSuper=false or onlyExplicitlyIncluded=true. ...
area/plugin
kind/security

Summary The env field (Property Map String,String ) is the primary mechanism for passing secrets such as CLOUDQUERY_API_KEY, AWS_ACCESS_KEY_ID, and AWS_SECRET_ACCESS_KEY into the CloudQuery process, as ...
area/plugin
kind/security

Summary The readArchive method calls entry.getName() and applies only a space-to-underscore replacement before passing the result to runContext.workingDir().createFile(sanitizedName). An archive entry ...
area/plugin
kind/blocker
kind/security

Summary The config field of type Object holds Docker configuration (typically a JSON string matching ~/.docker/config.json, which contains base64-encoded registry credentials in its auths section). The ...
area/plugin
kind/security

Summary AbstractConfluenceTask is annotated with @ToString but neither the username nor apiToken fields (both @PluginProperty(secret=true)) are annotated with @ToString.Exclude. Lombok will include both ...
area/plugin
kind/security

Problem The admin dashboard currently does not provide a course completion rate metric, making it difficult to track overall learner progress. Requirements Implement the backend logic to calculate the ...
backend

Authorization checks inconsistent. Audit and harden RBAC rules. Generated for enterprise-scale GitHub performance testing. Repository: platform-core Booster Run ID: boost-20260625-121619 Sequence: 346 ...
P2-medium
perf-test
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! Restrict your search to the title by using the in:title qualifier.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! Restrict your search to the title by using the in:title qualifier.