sixfold-space/madtea
sixfold-space/madtea
SHA256
2
0
Fork 0
Code Issues 220 Pull requests Projects Releases 14 Packages Wiki Activity Actions 1
Labels Milestones
Search syntax
assignee:<username> Filter by assigned user
author:<username> Filter by the author
is:all All
is:closed Closed
is:open Open
mentions:<username> Filter by mentioned user
modified:[>|<]<date> Filter by last modified date
review:<username> Filter by user who reviewed
sort:<by>:[asc|desc] Sort by: created|comments|updated|deadline
New issue
0 Open 17 Closed 17 All
Label
Clear labels
breaking
bug
documentation
enhancement
epic
good first issue
help wanted
refactoring
resolution/duplicate
resolution/invalid
resolution/wontfix
security
severity/critical
severity/high
severity/low
severity/medium
status/abandoned
status/blocked
status/needs-decision
status/needs-info
status/needs-verification
testing
upstream
Milestone
No milestone
Closed milestones
Public launch
Projects
Clear projects
Assignee
Clear assignees
No assignee
claude-temp
hexajon
security: a credential resolver returns a token without the cleartext-http check
security
severity/low
#715 by hexajon was closed 2026-10-06 18:07:57 +00:00 0 / 2
security: a credential resolver returns a token without the cleartext-http check
resolution/duplicate
security
severity/low
1
#714 by hexajon was closed 2026-10-05 12:31:14 +00:00 0 / 2
security: remove the legacy OAuth client-id fallback (it reads the merged git config)
breaking
security
severity/low
#712 by hexajon was closed 2026-10-09 18:37:56 +00:00 0 / 3
security: repo-flags endpoints build API paths with raw, unescaped segments
security
severity/low
#711 by hexajon was closed 2026-10-06 18:05:59 +00:00 0 / 1
security: git tag create does not guard the tag name against a leading dash
security
severity/low
#710 by hexajon was closed 2026-10-06 18:05:17 +00:00 0 / 2
harden: write a per-repo plaintext token only with recorded --insecure-storage consent
security
severity/low
#610 by hexajon was closed 2026-09-23 16:29:08 +00:00
harden: escape every value that goes into an API path or query
refactoring
security
severity/low
#609 by hexajon was closed 2026-09-24 14:11:56 +00:00
harden: strip userinfo from the URL that auth whoami prints
security
severity/low
#608 by hexajon was closed 2026-09-23 16:38:54 +00:00
harden: refuse a token over non-loopback http on every config-layer request
security
severity/low
#605 by hexajon was closed 2026-09-23 15:28:29 +00:00
harden: bound the poll history and the timeout of actions run_watch
security
severity/low
#602 by hexajon was closed 2026-09-24 14:00:09 +00:00
Apply redactToHost to the 403 scope-hint URL so a userinfo-bearing madtea.url can't echo credentials
security
severity/low
#275 by hexajon was closed 2026-07-19 19:27:42 +00:00
Security: install stale-sweep executes candidate binaries from user-writable dirs
security
severity/low
#274 by hexajon was closed 2026-07-19 19:27:42 +00:00
Security hardening: add explicit permissions: {contents: read} to both workflows
security
severity/low
testing
1
#273 by hexajon was closed 2026-07-19 19:28:40 +00:00
Document a sudoers caveat for madtea update in SECURITY.md (as-root arbitrary read via --apply)
documentation
security
severity/low
#269 by hexajon was closed 2026-07-19 20:21:10 +00:00
Tighten analytics usage log to 0600 for consistency with other on-disk writes
security
severity/low
#268 by hexajon was closed 2026-07-19 19:27:41 +00:00
Security hardening: pin the go install @latest tool fetches in CI and setup-dev.sh
security
severity/low
testing
#267 by hexajon was closed 2026-07-19 19:28:40 +00:00
madt_auth_use_ssh skips DirScope.resolve and can mutate a foreign primary checkout's remote
security
severity/low
#262 by hexajon was closed 2026-07-19 19:27:41 +00:00