GitHub Actions 0eb0660d41 fix(crowdsec): resolve LAPI "access forbidden" authentication failures ...

Replace name-based bouncer validation with actual LAPI authentication
testing. The previous implementation checked if a bouncer NAME existed
but never validated if the API KEY was accepted by CrowdSec LAPI.

Key changes:
- Add testKeyAgainstLAPI() with real HTTP authentication against
  /v1/decisions/stream endpoint
- Implement exponential backoff retry (500ms → 5s cap) for transient
  connection errors while failing fast on 403 authentication failures
- Add mutex protection to prevent concurrent registration race conditions
- Use atomic file writes (temp → rename) for key persistence
- Mask API keys in all log output (CWE-312 compliance)

Breaking behavior: Invalid env var keys now auto-recover by registering
a new bouncer instead of failing silently with stale credentials.

Includes temporary acceptance of 7 Debian HIGH CVEs with documented
mitigation plan (Alpine migration in progress - issue #631).

2026-02-04 02:51:52 +00:00

..

testdata

fix: enhance useImport tests with improved structure and error handling

2026-01-31 07:30:41 +00:00

access_list_handler_coverage_test.go

hotfix(api): add UUID support to access list endpoints

2026-01-29 03:15:06 +00:00

access_list_handler_test.go

hotfix(api): add UUID support to access list endpoints

2026-01-29 03:15:06 +00:00

access_list_handler.go

hotfix(api): add UUID support to access list endpoints

2026-01-29 03:15:06 +00:00

additional_coverage_test.go

fix(security): resolve API key logging vulnerability and enhance import validation

2026-02-04 00:12:13 +00:00

audit_log_handler_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

audit_log_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

auth_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

auth_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

backend_coverage.txt

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

backup_handler_sanitize_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

backup_handler_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

backup_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

benchmark_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

cerberus_logs_ws_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

cerberus_logs_ws.go

fix(security): add CrowdSec diagnostics script and E2E tests for console enrollment and diagnostics

2026-02-03 18:26:32 +00:00

certificate_handler_coverage_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

certificate_handler_security_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

certificate_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

certificate_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

conversion_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

coverage_helpers_test.go

fix(security): add CrowdSec diagnostics script and E2E tests for console enrollment and diagnostics

2026-02-03 18:26:32 +00:00

coverage_quick_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

credential_handler_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

credential_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

crowdsec_archive_validation_test.go

fix(security): resolve API key logging vulnerability and enhance import validation

2026-02-04 00:12:13 +00:00

crowdsec_bouncer_test.go

feat: Add CrowdSec Bouncer Key Display component and integrate into Security page

2026-02-03 21:07:16 +00:00

crowdsec_cache_verification_test.go

fix(ci): enhance test database management and improve service cleanup

2026-02-01 09:33:26 +00:00

crowdsec_coverage_boost_test.go

fix(ci): enhance test database management and improve service cleanup

2026-02-01 09:33:26 +00:00

crowdsec_coverage_gap_test.go

fix(ci): security toggles tests, CrowdSec response data, and coverage improvement documentation

2026-02-02 11:55:55 +00:00

crowdsec_coverage_target_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

crowdsec_decisions_test.go

fix(ci): enhance test database management and improve service cleanup

2026-02-01 09:33:26 +00:00

crowdsec_exec_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

crowdsec_exec.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

crowdsec_handler_comprehensive_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

crowdsec_handler_coverage_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

crowdsec_handler_test.go

fix(crowdsec): resolve LAPI "access forbidden" authentication failures

2026-02-04 02:51:52 +00:00

crowdsec_handler.go

fix(crowdsec): resolve LAPI "access forbidden" authentication failures

2026-02-04 02:51:52 +00:00

crowdsec_lapi_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

crowdsec_presets_handler_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

crowdsec_pull_apply_integration_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

crowdsec_state_sync_test.go

fix(ci): enhance test database management and improve service cleanup

2026-02-01 09:33:26 +00:00

crowdsec_stop_lapi_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

db_health_handler_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

db_health_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

dns_detection_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

dns_detection_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

dns_provider_handler_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

dns_provider_handler.go

fix(e2e): enhance toast feedback handling and improve test stability

2026-01-29 20:32:38 +00:00

doc.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

docker_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

docker_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

domain_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

domain_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

emergency_handler_test.go

fix(security): add CrowdSec diagnostics script and E2E tests for console enrollment and diagnostics

2026-02-03 18:26:32 +00:00

emergency_handler.go

fix(tests): use correct endpoint in break glass recovery test

2026-02-03 14:06:46 +00:00

encryption_handler_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

encryption_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

feature_flags_handler_coverage_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

feature_flags_handler_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

feature_flags_handler.go

fix(tests): enhance system settings tests with feature flag propagation and retry logic

2026-02-02 01:14:46 +00:00

handlers_blackbox_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

handlers_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

health_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

health_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

import_handler_coverage_test.go

fix(ci): security toggles tests, CrowdSec response data, and coverage improvement documentation

2026-02-02 11:55:55 +00:00

import_handler_sanitize_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

import_handler_test.go

fix(ci): security toggles tests, CrowdSec response data, and coverage improvement documentation

2026-02-02 11:55:55 +00:00

import_handler.go

fix(ci): security toggles tests, CrowdSec response data, and coverage improvement documentation

2026-02-02 11:55:55 +00:00

json_import_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

json_import_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

logs_handler_coverage_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

logs_handler_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

logs_handler.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

logs_ws.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

manual_challenge_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

manual_challenge_handler.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

misc_coverage_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

notification_coverage_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

notification_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

notification_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

notification_provider_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

notification_provider_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

notification_template_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

notification_template_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

npm_import_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

npm_import_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

PATCH_COVERAGE_ANALYSIS.md

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

perf_assert_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

plugin_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

plugin_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

pr_coverage_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

proxy_host_handler_security_headers_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

proxy_host_handler_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

proxy_host_handler_update_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

proxy_host_handler.go

chore: GORM remediation

2026-01-28 18:47:52 +00:00

remote_server_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

remote_server_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

sanitize_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

sanitize.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

security_geoip_endpoints_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

security_handler_additional_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

security_handler_audit_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

security_handler_cache_test.go

fix: reset models.Setting struct to prevent ID leakage in queries

2026-01-28 10:30:03 +00:00

security_handler_clean_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

security_handler_coverage_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

security_handler_fixed_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

security_handler_rules_decisions_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

security_handler_settings_test.go

fix: reset models.Setting struct to prevent ID leakage in queries

2026-01-28 10:30:03 +00:00

security_handler_test_fixed.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

security_handler_waf_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

security_handler.go

fix(security): add CrowdSec diagnostics script and E2E tests for console enrollment and diagnostics

2026-02-03 18:26:32 +00:00

security_headers_handler_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

security_headers_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

security_notifications_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

security_notifications.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

security_priority_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

security_ratelimit_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

security_toggles_test.go

fix(security): add CrowdSec diagnostics script and E2E tests for console enrollment and diagnostics

2026-02-03 18:26:32 +00:00

settings_handler_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

settings_handler.go

fix: reset models.Setting struct to prevent ID leakage in queries

2026-01-28 10:30:03 +00:00

ssrf_test_helpers_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

system_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

system_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

testdb_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

testdb.go

fix(ci): enhance test database management and improve service cleanup

2026-02-01 09:33:26 +00:00

update_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

update_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

uptime_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

uptime_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

user_handler_coverage_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

user_handler_test.go

chore: remediate 61 Go linting issues and tighten pre-commit config

2026-02-02 06:17:48 +00:00

user_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

user_integration_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

websocket_status_handler_test.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00

websocket_status_handler.go

chore: clean .gitignore cache

2026-01-26 19:22:05 +00:00