Charon

Author	SHA1	Message	Date
akanealw	eec8c28fb3	changed perms Some checks are pending Go Benchmark / Performance Regression Check (push) Waiting to run Details Cerberus Integration / Cerberus Security Stack Integration (push) Waiting to run Details Upload Coverage to Codecov / Backend Codecov Upload (push) Waiting to run Details Upload Coverage to Codecov / Frontend Codecov Upload (push) Waiting to run Details CodeQL - Analyze / CodeQL analysis (go) (push) Waiting to run Details CodeQL - Analyze / CodeQL analysis (javascript-typescript) (push) Waiting to run Details CrowdSec Integration / CrowdSec Bouncer Integration (push) Waiting to run Details Docker Build, Publish & Test / build-and-push (push) Waiting to run Details Docker Build, Publish & Test / Security Scan PR Image (push) Blocked by required conditions Details Quality Checks / Auth Route Protection Contract (push) Waiting to run Details Quality Checks / Codecov Trigger/Comment Parity Guard (push) Waiting to run Details Quality Checks / Backend (Go) (push) Waiting to run Details Quality Checks / Frontend (React) (push) Waiting to run Details Rate Limit integration / Rate Limiting Integration (push) Waiting to run Details Security Scan (PR) / Trivy Binary Scan (push) Waiting to run Details Supply Chain Verification (PR) / Verify Supply Chain (push) Waiting to run Details WAF integration / Coraza WAF Integration (push) Waiting to run Details	2026-04-22 18:19:14 +00:00
GitHub Actions	f8667bcc66	fix: enhance CodeQL custom model for SSRF protection clarity and update URL validation comments	2026-01-01 03:29:38 +00:00
GitHub Actions	beb230c0d6	fix: sanitize user input for log injection protection in ProxyHostHandler	2026-01-01 03:06:36 +00:00
GitHub Actions	5a3f0fed62	fix: update CodeQL custom model and comments in TestURLConnectivity for improved SSRF protection clarity	2026-01-01 03:02:23 +00:00
GitHub Actions	d2447da604	fix: enhance SSRF protection documentation and improve function return clarity in TestURLConnectivity	2025-12-31 23:30:56 +00:00
GitHub Actions	f46d19b3c0	fix(security): enhance SSRF defense-in-depth with monitoring (CWE-918) - Add CodeQL custom model recognizing ValidateExternalURL as sanitizer - Enhance validation: hostname length (RFC 1035), IPv6-mapped IPv4 blocking - Integrate Prometheus metrics (charon_ssrf_blocks_total, charon_url_validation_total) - Add security audit logging with sanitized error messages - Fix test race conditions with atomic types - Update SECURITY.md with 5-layer defense documentation Related to: #450 Coverage: Backend 86.3%, Frontend 87.27% Security scans: CodeQL, Trivy, govulncheck all clean	2025-12-31 21:17:08 +00:00

6 Commits