-
Notifications
You must be signed in to change notification settings - Fork 8
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[epic] v0.13 security assessment: remediation tracking
ares: securitySecurity-related finding (vulnerability or hardening)Security-related finding (vulnerability or hardening)epicTracking epic grouping related issuesTracking epic grouping related issuespriority: critical 🚨Critical - drop everything, immediate attentionCritical - drop everything, immediate attentionStatus: Open.#456 In nebari-dev/nebi;[security] HTTP responses omit CSP, HSTS, and other browser security headers
ares: securitySecurity-related finding (vulnerability or hardening)Security-related finding (vulnerability or hardening)priority: low 🌱Low priority - nice to haveLow priority - nice to haveStatus: Open.#455 In nebari-dev/nebi;[security] Environment build APIs have no request-size caps, quotas, or per-job deadlines
ares: securitySecurity-related finding (vulnerability or hardening)Security-related finding (vulnerability or hardening)priority: medium ⚡Medium priority - standard queueMedium priority - standard queueStatus: Open.#453 In nebari-dev/nebi;[security] Group and administrator reconciliation fails open on error
ares: securitySecurity-related finding (vulnerability or hardening)Security-related finding (vulnerability or hardening)priority: medium ⚡Medium priority - standard queueMedium priority - standard queueStatus: Open.#452 In nebari-dev/nebi;[security] Build/release pin an unsupported Go 1.24 line with no vulnerability scan gate
ares: securitySecurity-related finding (vulnerability or hardening)Security-related finding (vulnerability or hardening)priority: medium ⚡Medium priority - standard queueMedium priority - standard queueStatus: Open.#451 In nebari-dev/nebi;[security] Bearer tokens accepted via ?token= query string on all protected routes
ares: securitySecurity-related finding (vulnerability or hardening)Security-related finding (vulnerability or hardening)priority: medium ⚡Medium priority - standard queueMedium priority - standard queueStatus: Open.#449 In nebari-dev/nebi;[security] Release artifacts use mutable build inputs and lack signatures/provenance/SBOMs; installers skip checksum verification
ares: securitySecurity-related finding (vulnerability or hardening)Security-related finding (vulnerability or hardening)priority: high 🔥High priority - address soonHigh priority - address soonStatus: Open.#447 In nebari-dev/nebi;[security] OIDC/proxy accounts linked by mutable username/email instead of (issuer, subject)
ares: securitySecurity-related finding (vulnerability or hardening)Security-related finding (vulnerability or hardening)priority: high 🔥High priority - address soonHigh priority - address soonStatus: Open.#446 In nebari-dev/nebi;[security] Untrusted environment builds run in a shared worker with DB credentials and a shared multi-tenant volume
ares: securitySecurity-related finding (vulnerability or hardening)Security-related finding (vulnerability or hardening)priority: high 🔥High priority - address soonHigh priority - address soonStatus: Open.#445 In nebari-dev/nebi;[security] Registry read/write RBAC is defined but never enforced on browse/tags/import/publish
ares: securitySecurity-related finding (vulnerability or hardening)Security-related finding (vulnerability or hardening)priority: high 🔥High priority - address soonHigh priority - address soonStatus: Open.#444 In nebari-dev/nebi;Migrate
nebiFrontend shadcn Components & Theme to the@nebariDesign Registrydeveloper experienceSupports developer experience improvementsSupports developer experience improvementsuser experienceRelated to user comprehension and enjoymentRelated to user comprehension and enjoymentMSize: MMediumPriority: MediumStatus: Open.- Status: Open.#432 In nebari-dev/nebi;