Skip to content

fix docker builds

f70adfb
Select commit
Loading
Failed to load commit list.
Merged

Feat/sync #32

fix docker builds
f70adfb
Select commit
Loading
Failed to load commit list.
This check has been archived and is scheduled for deletion. Learn more about checks retention
GitHub Advanced Security / CodeQL failed Dec 3, 2024 in 5s

6 new alerts including 3 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 3 high
  • 3 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 75 in dist/dashboard/_next/static/chunks/5679-bec633b225238aa1.js

See this annotation in the file changed.

Code scanning / CodeQL

Prototype-polluting function Medium

Properties are copied from
r
to
i
without guarding against prototype pollution.

Check warning on line 75 in dist/dashboard/_next/static/chunks/5679-bec633b225238aa1.js

See this annotation in the file changed.

Code scanning / CodeQL

Prototype-polluting function Medium

Properties are copied from
r
to
i
without guarding against prototype pollution.

Check failure on line 30 in src/components/database/ElasticSearchMetadataQuery.ts

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete string escaping or encoding High

This replaces only the first occurrence of ']'.

Check warning on line 32 in src/components/httpRoutes/policyServer.ts

See this annotation in the file changed.

Code scanning / CodeQL

Information exposure through a stack trace Medium

This information exposed to the user depends on
stack trace information
.

Check failure on line 164 in src/index.ts

See this annotation in the file changed.

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
a file system access
, but is not rate-limited.

Check failure on line 165 in src/index.ts

See this annotation in the file changed.

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
a file system access
, but is not rate-limited.

Check failure on line 624 in src/utils/config.ts

See this annotation in the file changed.

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by
process environment
as clear text.