Skip to content

Actions: Junirezz/YieldVault-RWA

Actions

CodeQL Security Scanning

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
112 workflow runs
112 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
solved CodeQL Security Scanning #112: Pull request #1518 opened by KayMuna
1m 2s KayMuna:feat/issues
KayMuna:feat/issues
1m 2s
[1433] Prisma $transaction isolation level defaults to ReadCommitted allowing phantom reads in allocation rebalance CodeQL Security Scanning #111: Pull request #1517 opened by ToryMic
1m 20s ToryMic:fix/1433-prisma-transaction-isolation-level-defaults-to-readcommitted-allowing-phantom-reads-in-allocation-rebalance
ToryMic:fix/1433-prisma-transaction-isolation-level-defaults-to-readcommitted-allowing-phantom-reads-in-allocation-rebalance
1m 20s
[1431] Auth middleware accepts expired JWT for 60s due to clockTolerance misconfiguration CodeQL Security Scanning #110: Pull request #1516 synchronize by ToryMic
1m 9s ToryMic:fix/1431-auth-middleware-accepts-expired-jwt-for-60s-due-to-clocktolerance-misconfiguration
ToryMic:fix/1431-auth-middleware-accepts-expired-jwt-for-60s-due-to-clocktolerance-misconfiguration
1m 9s
[1430] GET /vaults query does not enforce max limit and allows limit=100000 to OOM the API CodeQL Security Scanning #109: Pull request #1515 synchronize by ToryMic
1m 38s ToryMic:fix/1430-get-vaults-query-does-not-enforce-max-limit-and-allows-limit-100000-to-oom-the-api
ToryMic:fix/1430-get-vaults-query-does-not-enforce-max-limit-and-allows-limit-100000-to-oom-the-api
1m 38s
[1431] Auth middleware accepts expired JWT for 60s due to clockTolerance misconfiguration CodeQL Security Scanning #108: Pull request #1516 synchronize by ToryMic
1m 4s ToryMic:fix/1431-auth-middleware-accepts-expired-jwt-for-60s-due-to-clocktolerance-misconfiguration
ToryMic:fix/1431-auth-middleware-accepts-expired-jwt-for-60s-due-to-clocktolerance-misconfiguration
1m 4s
[1431] Auth middleware accepts expired JWT for 60s due to clockTolerance misconfiguration CodeQL Security Scanning #107: Pull request #1516 opened by ToryMic
2m 5s ToryMic:fix/1431-auth-middleware-accepts-expired-jwt-for-60s-due-to-clocktolerance-misconfiguration
ToryMic:fix/1431-auth-middleware-accepts-expired-jwt-for-60s-due-to-clocktolerance-misconfiguration
2m 5s
[1430] GET /vaults query does not enforce max limit and allows limit=100000 to OOM the API CodeQL Security Scanning #106: Pull request #1515 opened by ToryMic
1m 7s ToryMic:fix/1430-get-vaults-query-does-not-enforce-max-limit-and-allows-limit-100000-to-oom-the-api
ToryMic:fix/1430-get-vaults-query-does-not-enforce-max-limit-and-allows-limit-100000-to-oom-the-api
1m 7s
Fix graceful shutdown to drain requests before disconnecting Prisma CodeQL Security Scanning #105: Pull request #1514 opened by The-Big-Danny
Action required The-Big-Danny:Graceful-shutdown
The-Big-Danny:Graceful-shutdown
Action required
fix: check Redis connectivity in /ready health probe CodeQL Security Scanning #104: Pull request #1513 synchronize by Jayycob2211
Action required Jayycob2211:fix/issue-1443-health-ready-endpoint-does-not-check-redis
Jayycob2211:fix/issue-1443-health-ready-endpoint-does-not-check-redis
Action required
fix: check Redis connectivity in /ready health probe CodeQL Security Scanning #103: Pull request #1513 synchronize by Jayycob2211
Action required Jayycob2211:fix/issue-1443-health-ready-endpoint-does-not-check-redis
Jayycob2211:fix/issue-1443-health-ready-endpoint-does-not-check-redis
Action required
fix: check Redis connectivity in /ready health probe CodeQL Security Scanning #102: Pull request #1513 synchronize by Jayycob2211
Action required Jayycob2211:fix/issue-1443-health-ready-endpoint-does-not-check-redis
Jayycob2211:fix/issue-1443-health-ready-endpoint-does-not-check-redis
Action required
fix: check Redis connectivity in /ready health probe CodeQL Security Scanning #101: Pull request #1513 opened by Jayycob2211
Action required Jayycob2211:fix/issue-1443-health-ready-endpoint-does-not-check-redis
Jayycob2211:fix/issue-1443-health-ready-endpoint-does-not-check-redis
Action required
Tracingspanforvaultdepositdoesnotpropagattrace idtooutboxeventcausingbrokentraces CodeQL Security Scanning #100: Pull request #1512 opened by elizabethklien3-pixel
Action required elizabethklien3-pixel:TracingspanforvaultdepositdoesnotpropagattraceIdtooutboxeventcausingbrokentraces
elizabethklien3-pixel:TracingspanforvaultdepositdoesnotpropagattraceIdtooutboxeventcausingbrokentraces
Action required
fix(db): acquire postgres advisory lock during migration execution (#1440) CodeQL Security Scanning #99: Pull request #1511 opened by Awosdot
1m 8s Awosdot:feature/issue-1440-advisory-lock-migration-runner
Awosdot:feature/issue-1440-advisory-lock-migration-runner
1m 8s
fix(documents): enforce content-type whitelist on S3 presigned URL generation (#1439) CodeQL Security Scanning #98: Pull request #1510 opened by Awosdot
1m 1s Awosdot:feature/issue-1439-s3-presigned-url-content-type-whitelist
Awosdot:feature/issue-1439-s3-presigned-url-content-type-whitelist
1m 1s
fix(portfolio): filter soft-deleted vaults from user portfolio aggregation (#1438) CodeQL Security Scanning #97: Pull request #1509 opened by Awosdot
1m 6s Awosdot:feature/issue-1438-exclude-soft-deleted-vaults
Awosdot:feature/issue-1438-exclude-soft-deleted-vaults
1m 6s
fix(openapi): recursively walk router stack in OpenAPI spec generation (#1441) CodeQL Security Scanning #96: Pull request #1508 opened by Awosdot
1m 4s Awosdot:feature/issue-1441-openapi-router-traversal
Awosdot:feature/issue-1441-openapi-router-traversal
1m 4s
feat: Fix yield accrual scheduler drift with setTimeout-based schedul… CodeQL Security Scanning #95: Pull request #1507 synchronize by alamuoyeemmanuel7-create
1m 28s alamuoyeemmanuel7-create:feature/yield-accrual-scheduler-1450
alamuoyeemmanuel7-create:feature/yield-accrual-scheduler-1450
1m 28s
feat: Add audit log IP and user-agent capture for SOC2 traceability (… CodeQL Security Scanning #94: Pull request #1506 synchronize by alamuoyeemmanuel7-create
1m 9s alamuoyeemmanuel7-create:feature/audit-log-soc2-1454
alamuoyeemmanuel7-create:feature/audit-log-soc2-1454
1m 9s
feat: Fix yield accrual scheduler drift with setTimeout-based schedul… CodeQL Security Scanning #93: Pull request #1507 opened by alamuoyeemmanuel7-create
1m 12s alamuoyeemmanuel7-create:feature/yield-accrual-scheduler-1450
alamuoyeemmanuel7-create:feature/yield-accrual-scheduler-1450
1m 12s
feat: Add audit log IP and user-agent capture for SOC2 traceability (… CodeQL Security Scanning #92: Pull request #1506 opened by alamuoyeemmanuel7-create
1m 15s alamuoyeemmanuel7-create:feature/audit-log-soc2-1454
alamuoyeemmanuel7-create:feature/audit-log-soc2-1454
1m 15s
fix: scope and rotate API keys per tenant with expiry and scopes CodeQL Security Scanning #91: Pull request #1505 opened by oycodes
-1s oycodes:fix/issue-1446-api-key-authentication-does-not-rotate-or-scope
oycodes:fix/issue-1446-api-key-authentication-does-not-rotate-or-scope
-1s
fix: pin vault metadata to IPFS and track pin lifecycle CodeQL Security Scanning #90: Pull request #1504 opened by bluegate916
Action required bluegate916:fix/issue-1449-upload-vault-metadata-to-ipfs-without-pinning
bluegate916:fix/issue-1449-upload-vault-metadata-to-ipfs-without-pinning
Action required
fix(backend): emit LF-only OpenAPI spec to avoid phantom Windows CRLF diffs CodeQL Security Scanning #89: Pull request #1503 opened by simonpeters298
Action required simonpeters298:chore/1374-fix-crlf-normalization
simonpeters298:chore/1374-fix-crlf-normalization
Action required
fix: cursor pagination for vault transactions endpoint CodeQL Security Scanning #88: Pull request #1502 opened by Fang0067
Action required Fang0067:fix/issue-1444-cursor-pagination-for-get-vaults-id
Fang0067:fix/issue-1444-cursor-pagination-for-get-vaults-id
Action required