 Jeppe B
|
b25ce9cb11
|
Stop exposing relay local IPs by default
|
2026-06-01 23:43:53 +02:00 |
|
|
Jeppe B
|
e3b38519fb
|
Merge pull request #239 from copenhagentruckwash/propose-fix-for-qodana-vulnerability
Skip Qodana when cloud token is missing
|
2026-06-01 23:31:34 +02:00 |
|
|
Jeppe B
|
d244c000c3
|
Skip Qodana when cloud token is missing
|
2026-06-01 23:31:24 +02:00 |
|
|
Jeppe B
|
dcd57c7092
|
Merge pull request #221 from copenhagentruckwash/fix-system-search-associations-vulnerability
Prevent association expansion from bypassing own-only access
|
2026-06-01 23:31:00 +02:00 |
|
|
Jeppe B
|
0a7e58fc01
|
Merge pull request #222 from copenhagentruckwash/fix-hardcoded-bearer-tokens-in-tests
Remove hardcoded API credentials and resolve merge conflict in test HTTP file
|
2026-06-01 23:29:28 +02:00 |
|
|
Jeppe B
|
07a3ef6418
|
Merge pull request #237 from copenhagentruckwash/fix-concurrent-access-vulnerability-in-start-command
Add per-lane START lock to prevent TOCTOU relay replay on wash start
|
2026-06-01 23:28:45 +02:00 |
|
|
Jeppe B
|
bffed6f5f3
|
Fix self-serve start relay race
|
2026-06-01 23:28:36 +02:00 |
|
|
Jeppe B
|
bfec31f94b
|
Merge pull request #236 from copenhagentruckwash/fix-task-attachment-link-vulnerability
Enforce lane department authorization for self-serve eligibility
|
2026-06-01 23:28:05 +02:00 |
|
|
Jeppe B
|
2123835aae
|
Fix self-serve eligibility lane authorization
|
2026-06-01 23:27:56 +02:00 |
|
|
Jeppe B
|
11f06e8f53
|
Merge pull request #235 from copenhagentruckwash/investigate-self-serve-path-projection-dos-vulnerability
Clamp self-serve path projection limits
|
2026-06-01 23:27:33 +02:00 |
|
|
Jeppe B
|
6712368323
|
Clamp self-serve path projection limits
|
2026-06-01 23:27:22 +02:00 |
|
|
Jeppe B
|
99fe659dbc
|
Merge pull request #234 from copenhagentruckwash/propose-fix-for-archived-department-vulnerability
Fix department archived filter smuggling
|
2026-06-01 23:27:06 +02:00 |
|
|
Jeppe B
|
357cfda46e
|
Fix department archived filter smuggling
|
2026-06-01 23:26:57 +02:00 |
|
|
Jeppe B
|
9c85135a07
|
Merge pull request #233 from copenhagentruckwash/fix-cross-tenant-vehicle-reference-leak
Restrict vehicle reference suggestions by department context
|
2026-06-01 23:26:36 +02:00 |
|
|
Jeppe B
|
a8a47104dd
|
Restrict vehicle reference suggestions by department context
|
2026-06-01 23:26:27 +02:00 |
|
|
Jeppe B
|
2c0907c486
|
Merge pull request #232 from copenhagentruckwash/fix-vulnerability-in-automatic-invoice-flags
Fix automatic invoice period flag suppression
|
2026-06-01 23:26:02 +02:00 |
|
|
copilot-swe-agent[bot]
|
b1647b4ad1
|
Merge origin/master and resolve orderBookingsPost conflict
|
2026-06-01 21:25:58 +00:00 |
|
|
Jeppe B
|
0ae28af309
|
Fix invoice period automatic flag cache misses
|
2026-06-01 23:25:54 +02:00 |
|
|
copilot-swe-agent[bot]
|
64d7e6f061
|
Merge master into fix-system-search-associations-vulnerability
|
2026-06-01 21:25:51 +00:00 |
|
|
Jeppe B
|
4f9a10402b
|
Merge pull request #231 from copenhagentruckwash/fix-exposure-of-private-git-commit-metadata
Redact GitHub commit metadata from public release runtime
|
2026-06-01 23:25:38 +02:00 |
|
|
Jeppe B
|
5e8ec85943
|
Redact release GitHub metadata from public runtime
|
2026-06-01 23:25:28 +02:00 |
|
|
Jeppe B
|
20d6056e40
|
Merge pull request #230 from copenhagentruckwash/fix-permission-bypass-for-invoice-flags
Guard invoice period flags by list permission
|
2026-06-01 23:25:02 +02:00 |
|
|
Jeppe B
|
5be6bc0198
|
Guard invoice period flags by list permission
|
2026-06-01 23:24:50 +02:00 |
|
|
Jeppe B
|
373aa7effb
|
Merge pull request #227 from copenhagentruckwash/fix-minio-credentials-exposure-vulnerability
Deny web access to replication bootstrap snapshots
|
2026-06-01 23:24:26 +02:00 |
|
|
Jeppe B
|
5282ee10ba
|
Merge pull request #229 from copenhagentruckwash/propose-fix-for-booking-po-vulnerability
Validate booking ownership before defaulting order PO (prevent cross-tenant leak)
|
2026-06-01 23:24:00 +02:00 |
|
|
copilot-swe-agent[bot]
|
06cba73a30
|
Initialize merge conflict resolution plan
|
2026-06-01 21:23:50 +00:00 |
|
|
Jeppe B
|
eab8394579
|
Fix booking PO default tenant validation
|
2026-06-01 23:23:49 +02:00 |
|
|
Jeppe B
|
b88c2742e8
|
Merge pull request #228 from copenhagentruckwash/fix-partial-release-tests-bypassing-promotion-gate
Require app-scoped release gates for bundle promotion
|
2026-06-01 23:23:34 +02:00 |
|
|
Jeppe B
|
4ea5eeb942
|
Require app-scoped release gates for bundle promotion
|
2026-06-01 23:23:23 +02:00 |
|
|
Jeppe B
|
e41b226529
|
Deny web access to replication bootstrap snapshots
|
2026-06-01 23:19:04 +02:00 |
|
|
Jeppe B
|
7cb248a112
|
Merge pull request #226 from copenhagentruckwash/fix-ssrf-vulnerability-in-release-gate
Harden release gate diagnostics fetches
|
2026-06-01 23:17:01 +02:00 |
|
|
Jeppe B
|
dfa0441266
|
Harden release gate diagnostics fetches
|
2026-06-01 23:16:51 +02:00 |
|
|
Jeppe B
|
d9dbd7dede
|
Merge pull request #225 from copenhagentruckwash/propose-fix-for-coolify-deployment-vulnerability
Prevent Coolify image from embedding replication snapshots
|
2026-06-01 23:16:33 +02:00 |
|
|
Jeppe B
|
3b8463e37f
|
Prevent Coolify image from embedding replication snapshots
|
2026-06-01 23:16:22 +02:00 |
|
|
Jeppe B
|
0e8b527ee4
|
Merge pull request #224 from copenhagentruckwash/fix-qodana-scan-fail-open-issue
Run Qodana locally when cloud token is missing
|
2026-06-01 23:15:47 +02:00 |
|
|
Jeppe B
|
86fb8bb700
|
Run Qodana without upload when token is missing
|
2026-06-01 23:15:36 +02:00 |
|
|
Jeppe B
|
6fbf7f271d
|
Merge pull request #223 from copenhagentruckwash/propose-fix-for-exposed-bootstrap-secret
Protect replication bootstrap file from static serving
|
2026-06-01 23:14:52 +02:00 |
|
|
Jeppe B
|
fe5ebdc203
|
Protect replication bootstrap file from static serving
|
2026-06-01 23:14:43 +02:00 |
|
|
Jeppe B
|
c6dbc0728f
|
Remove hardcoded credentials from orderBookingsPost HTTP examples
|
2026-06-01 23:14:12 +02:00 |
|
|
Jeppe B
|
a0b1dcb3e3
|
Fix system search association expansion for own-only types
|
2026-06-01 23:13:50 +02:00 |
|
|
Jeppe B
|
38c4c32f07
|
Merge pull request #220 from copenhagentruckwash/fix-empty-edge-broker-secret-vulnerability
Fail closed when edge broker secret is missing
|
2026-06-01 23:13:13 +02:00 |
|
|
Jeppe B
|
b6beb9622b
|
Fail closed when edge broker secret is missing
|
2026-06-01 23:13:04 +02:00 |
|
|
Jeppe B
|
db80dad15f
|
Merge pull request #219 from copenhagentruckwash/propose-fix-for-unauthenticated-pdf-access
Fix unauthenticated PDF disclosure in file_server fallback
|
2026-06-01 23:12:00 +02:00 |
|
|
Jeppe B
|
cf370a8035
|
Fix unauthenticated pdf_store access in file server
|
2026-06-01 23:11:48 +02:00 |
|
|
Jeppe B
|
0778776f00
|
Merge pull request #218 from copenhagentruckwash/fix-machine-relay-helper-logic
Fix hard MACHINE relay targeting
|
2026-06-01 23:11:13 +02:00 |
|
|
Jeppe B
|
ee55c23cde
|
Fix hard machine relay targeting
|
2026-06-01 23:11:01 +02:00 |
|
|
Jeppe B
|
1f50c83f93
|
Merge pull request #217 from copenhagentruckwash/fix-unauthenticated-/files/-attachment-access
Require authentication for direct /files/ access
|
2026-06-01 23:09:47 +02:00 |
|
|
Jeppe B
|
85f7bd1fc9
|
Require auth for direct /files/ downloads
|
2026-06-01 23:09:37 +02:00 |
|
|
Jeppe B
|
8f53e80ede
|
Merge pull request #216 from copenhagentruckwash/fix-vulnerability-in-wash-certificate-access
Disable global .pdf shortcut to prevent unauthenticated certificate downloads
|
2026-06-01 23:09:03 +02:00 |
|
|
Jeppe B
|
2a1a730a8c
|
Fix unauthenticated direct PDF certificate serving
|
2026-06-01 23:08:53 +02:00 |
|