Skip to content

Actions: assemblee-virtuelle/Semantic-Bus

Actions

🛡️ Security Audit

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
security.yml
162 workflow runs
162 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
docs(advisory): SB-RCE-2026-01 — dates fail-closed v0.11.18 (2026-09-09) 🛡️ Security Audit #197: Commit f811325 pushed by simonLouvet
51s master
master
51s
Merge pull request #510 from assemblee-virtuelle/docs/advisory-v0118 🛡️ Security Audit #196: Commit b150970 pushed by simonLouvet
50s master
master
50s
docs(advisory): SB-RCE-2026-01 — fail-closed clés computed, patched v0.11.18 🛡️ Security Audit #195: Pull request #510 opened by simonLouvet
57s docs/advisory-v0118
docs/advisory-v0118
57s
chore(deps): bump nodemailer and mailparser 🛡️ Security Audit #194: Pull request #509 opened by dependabot Bot
56s dependabot/npm_and_yarn/multi-d182879294
dependabot/npm_and_yarn/multi-d182879294
56s
chore(deps-dev): bump js-yaml from 3.15.1 to 3.15.2 🛡️ Security Audit #193: Pull request #508 opened by dependabot Bot
52s dependabot/npm_and_yarn/js-yaml-3.15.2
dependabot/npm_and_yarn/js-yaml-3.15.2
52s
release: bump to v0.11.18 (clés computed fail-closed) 🛡️ Security Audit #192: Commit 93e1a9c pushed by simonLouvet
56s master
master
56s
Merge pull request #506 from assemblee-virtuelle/security/validator-f… 🛡️ Security Audit #191: Commit 7033309 pushed by simonLouvet
54s master
master
54s
security(eval): clés computed fail-closed + flux de valeur (SB-RCE-2026-01) 🛡️ Security Audit #190: Pull request #506 opened by simonLouvet
48s security/validator-fail-closed
security/validator-fail-closed
48s
chore(deps): bump qs, body-parser and express 🛡️ Security Audit #189: Pull request #505 opened by dependabot Bot
50s dependabot/npm_and_yarn/multi-3287c92e1f
dependabot/npm_and_yarn/multi-3287c92e1f
50s
chore(deps): bump sanitize-html from 2.17.5 to 2.17.7 🛡️ Security Audit #188: Pull request #504 opened by dependabot Bot
50s dependabot/npm_and_yarn/sanitize-html-2.17.7
dependabot/npm_and_yarn/sanitize-html-2.17.7
50s
docs(security): contact de signalement + scope divulgation (SECURITY.md) 🛡️ Security Audit #187: Commit 90caace pushed by simonLouvet
1m 15s master
master
1m 15s
release: bump to v0.11.17 (hardening validateur RCE) 🛡️ Security Audit #186: Commit 06255a9 pushed by simonLouvet
1m 11s master
master
1m 11s
Merge pull request #502 from assemblee-virtuelle/security/validator-w… 🛡️ Security Audit #185: Commit b48af79 pushed by simonLouvet
50s master
master
50s
security(eval): validateur 100 % whitelist + raw-eval éliminé (SB-RCE-2026-01) 🛡️ Security Audit #184: Pull request #502 opened by simonLouvet
55s security/validator-whitelist-hardening
security/validator-whitelist-hardening
55s
Merge pull request #500 from assemblee-virtuelle/fix/timer-hmac-lib 🛡️ Security Audit #183: Commit ee3257d pushed by simonLouvet
56s master
master
56s
fix(timer): use this.hmac_lib instead of bare hmac_lib (ReferenceError) 🛡️ Security Audit #182: Pull request #500 opened by simonLouvet
1m 4s fix/timer-hmac-lib
fix/timer-hmac-lib
1m 4s
Merge pull request #498 from assemblee-virtuelle/fix/backfill-script-… 🛡️ Security Audit #181: Commit d298501 pushed by simonLouvet
56s master
master
56s
fix(backfill): ferme la connexion Mongo pour que le process se termine seul 🛡️ Security Audit #180: Pull request #498 opened by simonLouvet
1m 8s fix/backfill-script-exit
fix/backfill-script-exit
1m 8s
Merge pull request #496 from assemblee-virtuelle/docs/backfill-orphan… 🛡️ Security Audit #179: Commit 5ad5ed8 pushed by simonLouvet
54s master
master
54s
docs: backfill des orphelins = migration one-shot (plus nécessaire ≥ v0.11.16) 🛡️ Security Audit #178: Pull request #496 opened by simonLouvet
1m 1s docs/backfill-orphans-oneshot
docs/backfill-orphans-oneshot
1m 1s
Merge pull request #494 from assemblee-virtuelle/fix/orphan-component… 🛡️ Security Audit #177: Commit 5cb0bb4 pushed by simonLouvet
52s master
master
52s
fix(security): fail-closed sur composants sans workspaceId (orphelins) (SB-IDOR-2026-01) 🛡️ Security Audit #176: Pull request #494 opened by simonLouvet
1m 0s fix/orphan-components-failopen
fix/orphan-components-failopen
1m 0s
Merge pull request #492 from assemblee-virtuelle/fix/filter-accept-ar… 🛡️ Security Audit #175: Commit db1e5e2 pushed by simonLouvet
58s master
master
58s
fix(filter): accepte les items tableau (lignes xlsx/csv) 🛡️ Security Audit #174: Pull request #492 opened by simonLouvet
1m 4s fix/filter-accept-arrays
fix/filter-accept-arrays
1m 4s
Merge pull request #490 from assemblee-virtuelle/fix/component-id-in-url 🛡️ Security Audit #173: Commit 941222d pushed by simonLouvet
48s master
master
48s