Issues - compliance-scanner-agent - Gitea: Git with a cup of tea

sharang/compliance-scanner-agent

Labels Milestones New Issue

get_attack_chain has no pagination — long sessions return unbounded data high performance v0.3.0

opened 2026-03-30 13:29:56 +00:00 by sharang

No graceful shutdown — in-progress scans left in running state bug high infrastructure v0.3.0

opened 2026-03-30 13:29:56 +00:00 by sharang

sort_by query parameter is a NoSQL injection vector bug high security v0.3.0

opened 2026-03-30 13:29:56 +00:00 by sharang

Graph endpoints load full node/edge collections without pagination high performance v0.3.0

opened 2026-03-30 13:29:55 +00:00 by sharang

CVE monitor loads entire SBOM collection into memory bug high performance v0.3.0

opened 2026-03-30 13:29:55 +00:00 by sharang

Scheduled scans run sequentially — one slow repo blocks all others bug high performance v0.3.0

opened 2026-03-30 13:29:55 +00:00 by sharang

Health endpoint does not verify database connectivity bug critical infrastructure v0.3.0

opened 2026-03-30 13:28:53 +00:00 by sharang

No request body size limit on API and webhook servers critical infrastructure security v0.3.0

opened 2026-03-30 13:28:53 +00:00 by sharang

JWKS cache never expires — key rotation requires restart bug critical security v0.3.0

opened 2026-03-30 13:28:52 +00:00 by sharang

JWT audience validation disabled — cross-app token reuse critical security v0.3.0

opened 2026-03-30 13:28:52 +00:00 by sharang

Webhook auth bypass when webhook_secret is None bug critical security v0.3.0

opened 2026-03-30 13:28:02 +00:00 by sharang

[medium] oauth-patterns: OAuth flow without PKCE

opened 2026-03-18 16:01:25 +00:00 by sharang

[medium] gdpr-patterns: Missing data deletion capability

opened 2026-03-18 16:01:24 +00:00 by sharang

[medium] semgrep: Service 'mailserver' allows for privilege escalation via setuid or setgid binaries. Add 'no-new-privileges:true' in 'security_opt' to prevent this.

opened 2026-03-18 16:01:24 +00:00 by sharang

test: verify issue tracker integrations (GitHub, GitLab, Jira)

opened 2026-03-17 18:59:37 +00:00 by sharang

test: verify PR scanning and review comments

opened 2026-03-17 18:59:37 +00:00 by sharang

test: verify Okta user cleanup integration

opened 2026-03-17 18:59:36 +00:00 by sharang

test: verify Auth0 user cleanup integration

opened 2026-03-17 18:59:36 +00:00 by sharang

feat: implement Firebase user cleanup for pentest sessions

opened 2026-03-17 18:59:36 +00:00 by sharang

1 2 3 4