 Jeppe B
|
0dc7f813a8
|
Merge pull request #188 from copenhagentruckwash/propose-fix-for-relay-control-bypass-vulnerability
Fix self-serve relay sync to enforce lane safety guards
|
2026-06-01 22:33:11 +02:00 |
|
|
copilot-swe-agent[bot]
|
a828e9bc25
|
Merge origin/master into propose-fix-for-edge-broker-vulnerability, resolving all conflicts
|
2026-06-01 20:27:11 +00:00 |
|
|
copilot-swe-agent[bot]
|
8d2e71aaf3
|
Merge origin/master and resolve self-serve relay sync conflicts
|
2026-06-01 20:23:09 +00:00 |
|
|
Jeppe B
|
721e2670dd
|
Reject 2FA verification tokens for API authentication
|
2026-06-01 22:22:42 +02:00 |
|
|
Jeppe B
|
b03500d2d1
|
Merge pull request #189 from copenhagentruckwash/fix-subuser-token-authorization-vulnerability
Validate subuser grants before resolving subuser customer context
|
2026-06-01 22:21:58 +02:00 |
|
|
Jeppe B
|
ed9ebc2ac8
|
Validate subuser grants before resolving customer user
|
2026-06-01 22:21:44 +02:00 |
|
|
Jeppe B
|
64beb38bae
|
Fix self-serve relay sync to enforce lane safety guards
|
2026-06-01 22:19:34 +02:00 |
|
|
Jeppe B
|
e13bbae01f
|
Merge pull request #184 from copenhagentruckwash/fix-edge-broker-default-shared-secret-issue
Harden edge broker shared secret defaults
|
2026-06-01 22:17:57 +02:00 |
|
|
Jeppe B
|
5ba0f5f9ba
|
Merge pull request #183 from copenhagentruckwash/fix-credential-exposure-in-.env.old
Remove leaked `.env.old` with credentials and add to `.gitignore`
|
2026-06-01 22:17:30 +02:00 |
|
|
Jeppe B
|
bb5f1db1b3
|
Merge branch 'master' into fix-credential-exposure-in-.env.old
|
2026-06-01 22:17:21 +02:00 |
|
|
copilot-swe-agent[bot]
|
cb63d10415
|
Merge origin/master into fix-edge-broker-default-shared-secret-issue
|
2026-06-01 20:12:06 +00:00 |
|
|
Jeppe B
|
4183c3928c
|
Merge pull request #187 from copenhagentruckwash/fix-hard-coded-tokens-in-test-file
Sanitize leaked credentials in test/orderBookingsPost.http
|
2026-06-01 22:11:38 +02:00 |
|
|
Jeppe B
|
28bae85b2a
|
Sanitize leaked credentials in order booking HTTP template
|
2026-06-01 22:11:23 +02:00 |
|
|
Jeppe B
|
f2db92de09
|
Harden edge broker defaults and compose exposure
|
2026-06-01 22:10:14 +02:00 |
|
|
Jeppe B
|
a41334f513
|
Merge pull request #185 from copenhagentruckwash/fix-mysql-debug-exposure-vulnerability
Harden mysql-debug compose service configuration
|
2026-06-01 22:09:46 +02:00 |
|
|
Jeppe B
|
175fb3a35f
|
Harden mysql-debug compose service configuration
|
2026-06-01 22:09:35 +02:00 |
|
|
copilot-swe-agent[bot]
|
8e6b29810a
|
Clean up resolved gitignore merge
|
2026-06-01 20:08:24 +00:00 |
|
|
Jeppe B
|
21e9b2c80f
|
Harden edge broker shared secret defaults
|
2026-06-01 22:08:20 +02:00 |
|
|
copilot-swe-agent[bot]
|
989d04167a
|
Resolve .gitignore merge conflict with master
|
2026-06-01 20:07:48 +00:00 |
|
|
Jeppe B
|
286127c390
|
Merge pull request #182 from copenhagentruckwash/fix-edge-broker-default-shared-secret-issue
Remove insecure default edge broker shared secret and stop exposing port 4300
|
2026-06-01 22:07:10 +02:00 |
|
|
copilot-swe-agent[bot]
|
2ba87a4850
|
Start merge conflict resolution
|
2026-06-01 20:06:07 +00:00 |
|
|
Jeppe B
|
6658af814b
|
Remove committed env backup with secrets
|
2026-06-01 22:04:11 +02:00 |
|
|
Jeppe B
|
2abd6d04e9
|
Merge pull request #180 from copenhagentruckwash/fix-edge-broker-vulnerability-in-repository
Harden edge broker compose defaults
|
2026-06-01 22:02:41 +02:00 |
|
|
copilot-swe-agent[bot]
|
3107779b74
|
Resolve merge conflicts with origin/master
|
2026-06-01 20:02:21 +00:00 |
|
|
Jeppe B
|
61a09dce87
|
Remove insecure default edge broker secret fallback
|
2026-06-01 22:01:39 +02:00 |
|
|
Jeppe B
|
a02ed69108
|
Merge pull request #181 from copenhagentruckwash/fix-remote-root-shell-execution-vulnerability
Gate edge-agent shell actions behind local opt-in
|
2026-06-01 22:01:01 +02:00 |
|
|
Jeppe B
|
9b69aadca4
|
Gate edge-agent shell actions behind local opt-in
|
2026-06-01 22:00:49 +02:00 |
|
|
Jeppe B
|
6204fb50f9
|
Harden edge broker compose defaults
|
2026-06-01 21:59:27 +02:00 |
|
|
Jeppe B
|
0a6a8aeab2
|
Merge pull request #179 from copenhagentruckwash/fix-vulnerability-in-ci-workflow
Harden tests workflow: run PR jobs on GitHub-hosted runners
|
2026-06-01 21:57:15 +02:00 |
|
|
copilot-swe-agent[bot]
|
7c21b6463d
|
Merge origin/master and resolve workflow conflicts
|
2026-06-01 19:55:27 +00:00 |
|
|
Jeppe B
|
d97cfda0ea
|
Harden CI by avoiding self-hosted runners on PR workflow
|
2026-06-01 21:48:39 +02:00 |
|
|
Jeppe B
|
aad5d77f41
|
Merge pull request #178 from copenhagentruckwash/propose-fix-for-exposure-of-sensitive-logs
Remove committed Caddy access log containing leaked secrets
|
2026-06-01 21:47:33 +02:00 |
|
|
Jeppe B
|
3b132cad95
|
Merge pull request #176 from copenhagentruckwash/fix-property-gate-command-authorization-bypass
Restore explicit permissions for property gate commands to fix authorization bypass
|
2026-06-01 21:03:30 +02:00 |
|
|
copilot-swe-agent[bot]
|
ab957092bd
|
Merge origin/master into propose-fix-for-exposure-of-sensitive-logs
|
2026-06-01 19:03:25 +00:00 |
|
|
copilot-swe-agent[bot]
|
b8f65f242f
|
Merge origin/master and resolve property gate conflict
|
2026-06-01 19:02:11 +00:00 |
|
|
Jeppe B
|
688cb0a664
|
Merge pull request #173 from copenhagentruckwash/fix-cross-tenant-certificate-attachment-vulnerability
Validate booking order context before certificates
|
2026-06-01 21:00:33 +02:00 |
|
|
Jeppe B
|
6eb4171fea
|
Merge pull request #172 from copenhagentruckwash/propose-fix-for-automation-permission-bug
Prevent XL Vask list automation execution
|
2026-06-01 21:00:21 +02:00 |
|
|
Jeppe B
|
ddba27a1be
|
Remove committed Caddy access log with leaked secrets
|
2026-06-01 20:59:59 +02:00 |
|
|
copilot-swe-agent[bot]
|
933b18b988
|
Merge origin/master and resolve booking conflict files
|
2026-06-01 18:59:05 +00:00 |
|
|
Jeppe B
|
18c6852865
|
Merge pull request #177 from copenhagentruckwash/fix-broker-secret-vulnerability-in-api
Harden edge broker shared-secret handling
|
2026-06-01 20:58:58 +02:00 |
|
|
Jeppe B
|
77403965f8
|
Harden edge broker shared-secret handling
|
2026-06-01 20:58:45 +02:00 |
|
|
copilot-swe-agent[bot]
|
a3e2765ad4
|
Merge origin/master and resolve XLVask route contract conflict
|
2026-06-01 18:57:46 +00:00 |
|
|
Jeppe B
|
787db994dd
|
Fix property gate command authorization bypass
|
2026-06-01 20:57:21 +02:00 |
|
|
Jeppe B
|
f8f603a38e
|
Merge pull request #175 from copenhagentruckwash/fix-vulnerability-in-studio-graph-edits
Fix authorization boundary for studio graph lane operations
|
2026-06-01 20:56:51 +02:00 |
|
|
Jeppe B
|
31a7224272
|
Fix studio graph lane operations permission checks
|
2026-06-01 20:56:38 +02:00 |
|
|
Jeppe B
|
492c81e27c
|
Merge pull request #174 from copenhagentruckwash/fix-vulnerability-in-studio-action-conditions
Fix fail-open condition gating in self-serve Studio action runner
|
2026-06-01 20:56:21 +02:00 |
|
|
Jeppe B
|
45bfb1525a
|
Fix studio action conditions to fail closed without results
|
2026-06-01 20:56:04 +02:00 |
|
|
Jeppe B
|
71ffa20811
|
Validate booking order context before certificates
|
2026-06-01 20:55:26 +02:00 |
|
|
Jeppe B
|
a466c6291c
|
Prevent XL Vask list automation execution
|
2026-06-01 20:54:44 +02:00 |
|
|
Jeppe B
|
9606d3b11d
|
Merge pull request #171 from copenhagentruckwash/fix-sensitive-data-exposure-vulnerability
Remove committed replication bootstrap snapshot with secrets
|
2026-06-01 20:54:25 +02:00 |
|