Charon

Author	SHA1	Message	Date
akanealw	eec8c28fb3	changed perms Some checks failed Go Benchmark / Performance Regression Check (push) Has been cancelled Details Cerberus Integration / Cerberus Security Stack Integration (push) Has been cancelled Details Upload Coverage to Codecov / Backend Codecov Upload (push) Has been cancelled Details Upload Coverage to Codecov / Frontend Codecov Upload (push) Has been cancelled Details CodeQL - Analyze / CodeQL analysis (go) (push) Has been cancelled Details CodeQL - Analyze / CodeQL analysis (javascript-typescript) (push) Has been cancelled Details CrowdSec Integration / CrowdSec Bouncer Integration (push) Has been cancelled Details Docker Build, Publish & Test / build-and-push (push) Has been cancelled Details Quality Checks / Auth Route Protection Contract (push) Has been cancelled Details Quality Checks / Codecov Trigger/Comment Parity Guard (push) Has been cancelled Details Quality Checks / Backend (Go) (push) Has been cancelled Details Quality Checks / Frontend (React) (push) Has been cancelled Details Rate Limit integration / Rate Limiting Integration (push) Has been cancelled Details Security Scan (PR) / Trivy Binary Scan (push) Has been cancelled Details Supply Chain Verification (PR) / Verify Supply Chain (push) Has been cancelled Details WAF integration / Coraza WAF Integration (push) Has been cancelled Details Docker Build, Publish & Test / Security Scan PR Image (push) Has been cancelled Details Repo Health Check / Repo health (push) Has been cancelled Details History Rewrite Dry-Run / Dry-run preview for history rewrite (push) Has been cancelled Details Prune Renovate Branches / prune (push) Has been cancelled Details Renovate / renovate (push) Has been cancelled Details Nightly Build & Package / sync-development-to-nightly (push) Has been cancelled Details Nightly Build & Package / Trigger Nightly Validation Workflows (push) Has been cancelled Details Nightly Build & Package / build-and-push-nightly (push) Has been cancelled Details Nightly Build & Package / test-nightly-image (push) Has been cancelled Details Nightly Build & Package / verify-nightly-supply-chain (push) Has been cancelled Details	2026-04-22 18:19:14 +00:00
GitHub Actions	93894c517b	fix(security): resolve API key logging vulnerability and enhance import validation Critical security fix addressing CWE-312/315/359 (Cleartext Storage/Cookie Storage/Privacy Exposure) where CrowdSec bouncer API keys were logged in cleartext. Implemented maskAPIKey() utility to show only first 4 and last 4 characters, protecting sensitive credentials in production logs. Enhanced CrowdSec configuration import validation with: - Zip bomb protection via 100x compression ratio limit - Format validation rejecting zip archives (only tar.gz allowed) - CrowdSec-specific YAML structure validation - Rollback mechanism on validation failures UX improvement: moved CrowdSec API key display from Security Dashboard to CrowdSec Config page for better logical organization. Comprehensive E2E test coverage: - Created 10 test scenarios including valid import, missing files, invalid YAML, zip bombs, wrong formats, and corrupted archives - 87/108 E2E tests passing (81% pass rate, 0 regressions) Security validation: - CodeQL: 0 CWE-312/315/359 findings (vulnerability fully resolved) - Docker Image: 7 HIGH base image CVEs documented (non-blocking, Debian upstream) - Pre-commit hooks: 13/13 passing (fixed 23 total linting issues) Backend coverage: 82.2% (+1.1%) Frontend coverage: 84.19% (+0.3%)	2026-02-04 00:12:13 +00:00

2 Commits