forked from Versent/saml2aws
-
Notifications
You must be signed in to change notification settings - Fork 0
Issues
is:issue state:open
is:issue state:open
Issue creation is restricted in this repository
Search results
Security: threat-model doc + credential-exposure hardening (exec env, console URL, cache encryption)
area:securityVulnerability, secret, and supply-chain scanningVulnerability, secret, and supply-chain scanningpriority:P2Priority 2 - nice to have, laterPriority 2 - nice to have, laterStatus: Open.#39 In neverendingsupport/fork-versent-saml2aws;Security: bound IdP response sizes (LimitReader) + XML parse hardening
area:securityVulnerability, secret, and supply-chain scanningVulnerability, secret, and supply-chain scanningpriority:P2Priority 2 - nice to have, laterPriority 2 - nice to have, laterStatus: Open.#38 In neverendingsupport/fork-versent-saml2aws;Security: browser provider writes IdP session cookies (storageState.json) world-readable
area:securityVulnerability, secret, and supply-chain scanningVulnerability, secret, and supply-chain scanningpriority:P1Priority 1 - high value, do soonPriority 1 - high value, do soonStatus: Open.#37 In neverendingsupport/fork-versent-saml2aws;Security: DUMP_CONTENT dumps credentials/cookies/assertions; redact sensitive HTTP logging
area:securityVulnerability, secret, and supply-chain scanningVulnerability, secret, and supply-chain scanningpriority:P1Priority 1 - high value, do soonPriority 1 - high value, do soonStatus: Open.#36 In neverendingsupport/fork-versent-saml2aws;Security: SSRF + SAML-assertion exfiltration via unvalidated Destination/Recipient URL
area:securityVulnerability, secret, and supply-chain scanningVulnerability, secret, and supply-chain scanningpriority:P0Priority 0 - foundational, do firstPriority 0 - foundational, do firstStatus: Open.#35 In neverendingsupport/fork-versent-saml2aws;[EPIC] Security review findings (SSRF, secret leakage, hardening)
area:securityVulnerability, secret, and supply-chain scanningVulnerability, secret, and supply-chain scanningStatus: Open.#34 In neverendingsupport/fork-versent-saml2aws;Hygiene: stale/WIP mocks, root-package grab-bag, //go:build tags, error-message typos
area:code-qualityCode-level quality: structure, error handling, duplicationCode-level quality: structure, error handling, duplicationpriority:P2Priority 2 - nice to have, laterPriority 2 - nice to have, laterStatus: Open.#33 In neverendingsupport/fork-versent-saml2aws;Dependencies: migrate aws-sdk-go v1 (EOL) to aws-sdk-go-v2 — upstream-first
area:code-qualityCode-level quality: structure, error handling, duplicationCode-level quality: structure, error handling, duplicationpriority:P2Priority 2 - nice to have, laterPriority 2 - nice to have, laterStatus: Open.#32 In neverendingsupport/fork-versent-saml2aws;cmd layer: extract shared auth flow (5× dup), table-driven flag overrides, single shell-template source
area:code-qualityCode-level quality: structure, error handling, duplicationCode-level quality: structure, error handling, duplicationpriority:P2Priority 2 - nice to have, laterPriority 2 - nice to have, laterStatus: Open.#31 In neverendingsupport/fork-versent-saml2aws;pkg/cookiejar: re-evaluate vendored stdlib fork (carries one patch, drifting behind stdlib)
area:code-qualityCode-level quality: structure, error handling, duplicationCode-level quality: structure, error handling, duplicationpriority:P1Priority 1 - high value, do soonPriority 1 - high value, do soonStatus: Open.#30 In neverendingsupport/fork-versent-saml2aws;Migrate off archived github.com/pkg/errors (614 call sites / 36 files) to stdlib %w wrapping
area:code-qualityCode-level quality: structure, error handling, duplicationCode-level quality: structure, error handling, duplicationpriority:P1Priority 1 - high value, do soonPriority 1 - high value, do soonStatus: Open.#29 In neverendingsupport/fork-versent-saml2aws;Error handling: fix ignored & mis-attributed errors (regex compile, swallowed reads, wrong wraps, cache/keychain semantics)
area:code-qualityCode-level quality: structure, error handling, duplicationCode-level quality: structure, error handling, duplicationpriority:P1Priority 1 - high value, do soonPriority 1 - high value, do soonStatus: Open.#28 In neverendingsupport/fork-versent-saml2aws;