Skip to content

v0.1.0-beta.4 - CodeQL HIGH fix

Pre-release
Pre-release

Choose a tag to compare

View all tags
@HetCreep HetCreep released this 09 Jul 06:43
v0.1.0-beta.4
This tag was signed with the committer’s verified signature.
HetCreep
SSH Key Fingerprint: 0osv9sipbbl2qmrI00rRA3kcEKs4ZuS+FBihPD/c8DU
Verified
Learn about vigilant mode.
bb730e5
This commit was signed with the committer’s verified signature.
HetCreep
SSH Key Fingerprint: 0osv9sipbbl2qmrI00rRA3kcEKs4ZuS+FBihPD/c8DU
Verified
Learn about vigilant mode.

CodeQL HIGH fix: js/file-system-race on ensureSelfIgnore is now an exclusive create (wx flag) - no exists-then-write TOCTOU. The idempotent write made the race harmless anyway; this silences the HIGH. Also: the file-system-race on the advisory lock (compare-after-write, by design) and Scorecard posture findings are dismissed-with-reason.

Assets 2
Loading