issues Search Results · language:Edge language:Python linked:pr language:JavaScript language:Java

Filter by

• • Code... (...)results
  • Repositories
    results
  • Issues
    results
  • Pull requests
    results
  • Discussions
    results
  • Users
    results
  • More

• State

  • Open
  • Closed

• Advanced

  • Owner
  • State
  • Close reason
  • Has linked pull request
  • Author
  • Assignee
  • Mentioned user
  • Mentioned team
  • Commenter
  • Involved user
  • Label
  • Milestone
  • Number of comments
  • Number of interactions
• Advanced search

Filter:Issues5.8M (5.8M)

5.8M results  (360 ms)

5.8M results

Sort by: Best match

Filter

sserada/fuseji

mask_json で dict キーもマスク対象にするオプションを追加する

背景 セキュリティ監査・品質レビュー両方で指摘された medium 重要度の漏洩経路。 Masker.mask_json の実装は dict キーを素通しする (engine.py:_mask_value L165 は値のみ再帰)。LLM オブザーバビリティ / OpenTelemetry / 一般的なログ収集では「キーに PII が入る」例が珍しくない: - OpenAI API ラッパー: ...

core

security

• sserada
·
• Opened 
  4 hours ago
·
• #85

sserada/fuseji

CREDIT_CARD を Vault.DEFAULT_EXCLUDED_TYPES に追加し PCI DSS 整合性を取る

背景 セキュリティ監査で指摘された medium 重要度の不整合。 Vault.DEFAULT_EXCLUDED_TYPES には現状 MY_NUMBER のみが含まれており、CREDIT_CARD は対応表に残存する。マイナンバーは番号法対応で復元不可なのに、PCI DSS Requirement 3.4 / 3.5 で「保存禁止または強い保護下」が求められる PAN が同等の保護を受けていないのは設計上の不整合。 ...

core

security

• sserada
·
• Opened 
  4 hours ago
·
• #84

krisoye/knowledge-bank-tools

refactor(backend): extract make_backend() factory — repoint direct ChromaDB constructors off vector_kb (EPIC #172, #160 prerequisite)

Context ChromaDB decommission (#160) is blocked by direct construction: src/batch_ingest.py:208, src/kb_cli.py (five sites: :419, :589, :714, :766, :818), and src/eval/parity.py:102 all call VectorKnowledgeBank(db_path=...) ...

status:blocked

type:refactor

• krisoye
·
• Opened 
  4 hours ago
·
• #187

sserada/fuseji

サーバーモードに API キー認証と CORS 制御を追加する

背景 セキュリティ監査で指摘された high 重要度の設計問題。 create_app() で構築される FastAPI アプリには認証ミドルウェア（API キー / Bearer トークン）、CORS 制御、レート制限のいずれも組み込まれていない。0.0.0.0 公開した場合、任意のクライアントから /mask /detect を無制限に呼べる。 攻撃シナリオ 1. 競合企業が /detect ...

security

server

• sserada
·
• Opened 
  4 hours ago
·
• #83

jegr78/gt-endurance-racing-broadcast

Docs: /api/docs/file/setup-guide serves non-clickable Links

Links are not clickable img width= 1178 height= 585 alt= Image src= https://github.com/user-attachments/assets/a0549b04-faa1-4f8b-8a60-e651dd2a913f /

bug

• jegr78
·
• 1
·
• Opened 
  4 hours ago
·
• #48

sserada/fuseji

Hash 戦略の mapping から逆引きできる PII surface を除去する

背景 セキュリティ監査で指摘された high 重要度の漏洩経路。 Hash 戦略は「不可逆な匿名化」をうたう名称だが、Hash.mask の戻り値 mapping に {hash: surface} 形式で生 PII が含まれる（src/fuseji/strategies.py:128-158）。MaskResult.mapping は engine.mask() 経由でそのまま呼び出し側に返るため、利用者が誤って ...

core

security

• sserada
·
• Opened 
  4 hours ago
·
• #82

newtontech/VASP-LSP

[PLAN24] Add vasp-lsp-check and vasp-lsp-explain JSON agent feedback CLIs

Parent: #37 This is one child issue for PLAN24: VASP Runtime Diagnostics And Agent Feedback. Public CI must not require a licensed VASP binary; use golden fixtures and deterministic local tests. Acceptance ...

enhancement

P1

• newtontech
·
• Opened 
  4 hours ago
·
• #44

newtontech/VASP-LSP

[PLAN24] Add parallel/restart preflight checks for KPAR/NCORE/NKRED and restart files

Parent: #37 This is one child issue for PLAN24: VASP Runtime Diagnostics And Agent Feedback. Public CI must not require a licensed VASP binary; use golden fixtures and deterministic local tests. Acceptance ...

enhancement

P2

• newtontech
·
• Opened 
  4 hours ago
·
• #43

CrossGL/crosstl

Restore modular Mojo project translation artifacts for Metal and Vulkan

Summary The full suite now fails in test_translate_project_generates_metal_and_spirv_for_modular_mojo_vector_add: the modular Mojo vector-add project translation emits zero translated artifacts where ...

bug

• NripeshN
·
• 1
·
• Opened 
  4 hours ago
·
• #1299

newtontech/VASP-LSP

[PLAN24] Add electronic-minimization failure diagnostics and guarded recovery hints

Parent: #37 This is one child issue for PLAN24: VASP Runtime Diagnostics And Agent Feedback. Public CI must not require a licensed VASP binary; use golden fixtures and deterministic local tests. Acceptance ...

enhancement

P2

• newtontech
·
• Opened 
  4 hours ago
·
• #42

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues

ProTip! Restrict your search to the title by using the in:title qualifier.

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues

ProTip! Restrict your search to the title by using the in:title qualifier.