Skip to content

Actions: mattglory/Flashstack

Actions

Security Scan

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
security.yml
223 workflow runs
223 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Security Scan Security Scan #224: Scheduled
1m 34s main
main
1m 34s
docs: correct D5's mechanism per #74 review, cross-link D6 as the real residual risk Security Scan #223: Pull request #75 synchronize by unixwhisperer
49s fix-d5-wording-per-74-review
fix-d5-wording-per-74-review
49s
fix(F-9): add reentrancy locks to the v3 successor pools (Option B) Security Scan #222: Pull request #88 opened by unixwhisperer
1m 2s security-lead/f9-v3-successor-reentrancy-lock
security-lead/f9-v3-successor-reentrancy-lock
1m 2s
docs+fix(security): resolve web/ decode-uri-component chain, document braces/elliptic as accepted risk Security Scan #221: Pull request #87 synchronize by mattglory
56s chore/dependency-audit-braces-fix
chore/dependency-audit-braces-fix
56s
Merge pull request #86 from mattglory/security-lead/f9-sbtc-pool-v2-i… Security Scan #220: Commit e0367e0 pushed by mattglory
1m 14s main
main
1m 14s
Merge pull request #85 from mattglory/docs-accept-braces-dos-finding Security Scan #219: Commit b161614 pushed by mattglory
1m 27s main
main
1m 27s
docs+fix(security): resolve web/ decode-uri-component chain, document braces/elliptic as accepted risk Security Scan #218: Pull request #87 synchronize by unixwhisperer
53s chore/dependency-audit-braces-fix
chore/dependency-audit-braces-fix
53s
docs+fix(security): resolve web/ decode-uri-component chain, document braces/elliptic as accepted risk Security Scan #217: Pull request #87 opened by unixwhisperer
44s chore/dependency-audit-braces-fix
chore/dependency-audit-braces-fix
44s
fix(F-9): independently prove the sbtc-pool-v2 deposit-reentrancy variant Security Scan #216: Pull request #86 synchronize by unixwhisperer
54s security-lead/f9-sbtc-pool-v2-independent-proof
security-lead/f9-sbtc-pool-v2-independent-proof
54s
fix(F-9): independently prove the sbtc-pool-v2 deposit-reentrancy variant Security Scan #215: Pull request #86 opened by unixwhisperer
58s security-lead/f9-sbtc-pool-v2-independent-proof
security-lead/f9-sbtc-pool-v2-independent-proof
58s
docs(security): document the braces/chokidar DoS finding as an accepted risk Security Scan #214: Pull request #85 opened by mattglory
55s docs-accept-braces-dos-finding
docs-accept-braces-dos-finding
55s
Merge pull request #81 from mattglory/docs-no-apply-mainnet-rule Security Scan #213: Commit 9d4b241 pushed by mattglory
1m 21s main
main
1m 21s
Merge pull request #84 from mattglory/audit-core-v3-pools Security Scan #212: Commit e66b3c5 pushed by mattglory
1m 24s main
main
1m 24s
docs: write the interim no-apply-mainnet rule into deployments/ Security Scan #211: Pull request #81 synchronize by mattglory
1m 1s docs-no-apply-mainnet-rule
docs-no-apply-mainnet-rule
1m 1s
docs(security): clarity-audit on flashstack-core + v3 pools -- F-9 not fixed in v3 successors Security Scan #210: Pull request #84 opened by mattglory
57s audit-core-v3-pools
audit-core-v3-pools
57s
docs(security): clarity-audit pass on the live v2 pools Security Scan #209: Commit b2fd70f pushed by mattglory
1m 42s main
main
1m 42s
Merge pull request #83 from mattglory/security-lead/f9-v2-pool-deposi… Security Scan #208: Commit 0dcdc84 pushed by mattglory
1m 29s main
main
1m 29s
CRITICAL FINDING (F-9): deposit-as-repayment reentrancy on live v2 pools Security Scan #207: Pull request #83 synchronize by unixwhisperer
1m 22s security-lead/f9-v2-pool-deposit-reentrancy
security-lead/f9-v2-pool-deposit-reentrancy
1m 22s
CRITICAL FINDING (F-9): deposit-as-repayment reentrancy on live v2 pools Security Scan #206: Pull request #83 opened by unixwhisperer
1m 7s security-lead/f9-v2-pool-deposit-reentrancy
security-lead/f9-v2-pool-deposit-reentrancy
1m 7s
Merge pull request #82 from mattglory/dependabot/npm_and_yarn/web/min… Security Scan #205: Commit 095dfc9 pushed by mattglory
1m 13s main
main
1m 13s
chore(deps-dev): Bump eslint-config-next from 16.3.5 to 16.3.6 in /web in the minor-and-patch group across 1 directory Security Scan #204: Pull request #82 opened by dependabot Bot
56s dependabot/npm_and_yarn/web/minor-and-patch-f4751d72e2
dependabot/npm_and_yarn/web/minor-and-patch-f4751d72e2
56s
Merge pull request #80 from mattglory/fix-next-critical-rce Security Scan #203: Commit e4473a2 pushed by mattglory
1m 34s main
main
1m 34s
Merge pull request #79 from mattglory/security-lead/pin-live-cores-ax… Security Scan #202: Commit d4c93e3 pushed by mattglory
1m 34s main
main
1m 34s
test: pin flashstack-stx-core/sbtc-core against deployed source (ajv.2.4 axis 2) Security Scan #201: Pull request #79 synchronize by mattglory
57s security-lead/pin-live-cores-axis2-drift
security-lead/pin-live-cores-axis2-drift
57s
test: pin flashstack-stx-core/sbtc-core against deployed source (ajv.2.4 axis 2) Security Scan #200: Pull request #79 synchronize by mattglory
59s security-lead/pin-live-cores-axis2-drift
security-lead/pin-live-cores-axis2-drift
59s