Skip to content
This repository has been archived by the owner on Feb 9, 2025. It is now read-only.

Sec updates #1950

Merged
merged 14 commits into from
Dec 12, 2023
Merged

Sec updates #1950

merged 14 commits into from
Dec 12, 2023

Conversation

silas-x
Copy link
Contributor

@silas-x silas-x commented Nov 27, 2023

Hey team,

This PR contains:

  1. Fixes for 6 critical and high SSRF/XSS vulns (check Security tab for code scanning with CodeQL)
  2. Fix for bigint not binding as part of the install, causing unexpected behaviour (e.g. https://github.com/solana-labs/governance-ui/actions/runs/6998523838/job/19036665741#step:6:120)
  3. Deny listing script execution for 2 new packages
  4. House keeping of github actions

Copy link

vercel bot commented Nov 27, 2023

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
governance-ui ✅ Ready (Inspect) Visit Preview 💬 Add feedback Nov 27, 2023 0:18am

@silas-x
Copy link
Contributor Author

silas-x commented Nov 27, 2023

@SebastianBor

@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@asktree
Copy link
Contributor

asktree commented Dec 12, 2023

Thanks

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants