Skip to content

Feat/stage #69

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
AdriGeorge wants to merge 527 commits into
base: main
Choose a base branch
from

fix docker tests & build only x64

6eb5ede
Select commit
Loading
Failed to load commit list.
Open

Feat/stage #69

fix docker tests & build only x64
6eb5ede
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Dec 19, 2025 in 4s

29 new alerts including 17 critical severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 17 critical
  • 4 high
  • 8 medium

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 57 in src/utils/asset.ts

See this annotation in the file changed.

Code scanning / CodeQL

Server-side request forgery Critical

The
URL
Loading
of this request depends on a
user-provided value
Loading
.

Check failure on line 165 in src/index.ts

See this annotation in the file changed.

Code scanning / CodeQL

Missing rate limiting High

This route handler performs
a file system access
Loading
, but is not rate-limited.

Check failure on line 419 in src/components/storage/index.ts

See this annotation in the file changed.

Code scanning / CodeQL

Server-side request forgery Critical

The
URL
Loading
of this request depends on a
user-provided value
Loading
.

Check failure on line 284 in src/components/storage/index.ts

See this annotation in the file changed.

Code scanning / CodeQL

Server-side request forgery Critical

The
URL
Loading
of this request depends on a
user-provided value
Loading
.

Check failure on line 31 in src/components/httpRoutes/logs.ts

See this annotation in the file changed.

Code scanning / CodeQL

Reflected cross-site scripting High

Cross-site scripting vulnerability due to a
user-provided value
Loading
.

Check failure on line 18 in src/components/httpRoutes/commands.ts

See this annotation in the file changed.

Code scanning / CodeQL

Reflected cross-site scripting High

Cross-site scripting vulnerability due to a
user-provided value
Loading
.

Check failure on line 30 in src/components/database/ElasticSearchMetadataQuery.ts

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete string escaping or encoding High

This replaces only the first occurrence of ']'.

Check failure on line 41 in src/components/core/compute/stopCompute.ts

See this annotation in the file changed.

Code scanning / CodeQL

Type confusion through parameter tampering Critical

Potential type confusion as
this HTTP request parameter
Loading
may be either an array or a string.

Check failure on line 40 in src/components/core/compute/stopCompute.ts

See this annotation in the file changed.

Code scanning / CodeQL

Type confusion through parameter tampering Critical

Potential type confusion as
this HTTP request parameter
Loading
may be either an array or a string.

Check failure on line 39 in src/components/core/compute/stopCompute.ts

See this annotation in the file changed.

Code scanning / CodeQL

Type confusion through parameter tampering Critical

Potential type confusion as
this HTTP request parameter
Loading
may be either an array or a string.

Check failure on line 374 in src/components/c2d/compute_engine_docker.ts

See this annotation in the file changed.

Code scanning / CodeQL

Server-side request forgery Critical

The
URL
Loading
of this request depends on a
user-provided value
Loading
.

Check failure on line 388 in src/components/c2d/compute_engine_docker.ts

See this annotation in the file changed.

Code scanning / CodeQL

Server-side request forgery Critical

The
URL
Loading
of this request depends on a
user-provided value
Loading
.

Check failure on line 70 in src/components/core/compute/getResults.ts

See this annotation in the file changed.

Code scanning / CodeQL

Type confusion through parameter tampering Critical

Potential type confusion as
this HTTP request parameter
Loading
may be either an array or a string.

Check failure on line 71 in src/components/core/compute/getResults.ts

See this annotation in the file changed.

Code scanning / CodeQL

Type confusion through parameter tampering Critical

Potential type confusion as
this HTTP request parameter
Loading
may be either an array or a string.

Check failure on line 72 in src/components/core/compute/getResults.ts

See this annotation in the file changed.

Code scanning / CodeQL

Type confusion through parameter tampering Critical

Potential type confusion as
this HTTP request parameter
Loading
may be either an array or a string.

Check failure on line 46 in src/components/core/compute/getStatus.ts

See this annotation in the file changed.

Code scanning / CodeQL

Type confusion through parameter tampering Critical

Potential type confusion as
this HTTP request parameter
Loading
may be either an array or a string.

Check failure on line 48 in src/components/core/compute/getStatus.ts

See this annotation in the file changed.

Code scanning / CodeQL

Type confusion through parameter tampering Critical

Potential type confusion as
this HTTP request parameter
Loading
may be either an array or a string.

Check failure on line 50 in src/components/core/compute/getStatus.ts

See this annotation in the file changed.

Code scanning / CodeQL

Type confusion through parameter tampering Critical

Potential type confusion as
this HTTP request parameter
Loading
may be either an array or a string.

Check failure on line 47 in src/components/core/compute/getStreamableLogs.ts

See this annotation in the file changed.

Code scanning / CodeQL

Type confusion through parameter tampering Critical

Potential type confusion as
this HTTP request parameter
Loading
may be either an array or a string.

Check failure on line 48 in src/components/core/compute/getStreamableLogs.ts

See this annotation in the file changed.

Code scanning / CodeQL

Type confusion through parameter tampering Critical

Potential type confusion as
this HTTP request parameter
Loading
may be either an array or a string.

Check failure on line 49 in src/components/core/compute/getStreamableLogs.ts

See this annotation in the file changed.

Code scanning / CodeQL

Type confusion through parameter tampering Critical

Potential type confusion as
this HTTP request parameter
Loading
may be either an array or a string.

Check warning on line 54 in src/components/httpRoutes/dids.ts

See this annotation in the file changed.

Code scanning / CodeQL

Exception text reinterpreted as HTML Medium

Exception text
Loading
is reinterpreted as HTML without escaping meta-characters.

Check warning on line 54 in src/components/httpRoutes/dids.ts

See this annotation in the file changed.

Code scanning / CodeQL

Information exposure through a stack trace Medium

This information exposed to the user depends on
stack trace information
Loading
.

Check warning on line 66 in src/components/httpRoutes/logs.ts

See this annotation in the file changed.

Code scanning / CodeQL

Exception text reinterpreted as HTML Medium

Exception text
Loading
is reinterpreted as HTML without escaping meta-characters.
Exception text
Loading
is reinterpreted as HTML without escaping meta-characters.

Check warning on line 81 in src/components/httpRoutes/logs.ts

See this annotation in the file changed.

Code scanning / CodeQL

Exception text reinterpreted as HTML Medium

Exception text
Loading
is reinterpreted as HTML without escaping meta-characters.