Skip to content

Fix/security improvements#1574

Merged
netomi merged 2 commits intoeclipse:security-improvementsfrom
yeeth-security:fix/security-improvements
Jan 30, 2026
Merged

Fix/security improvements#1574
netomi merged 2 commits intoeclipse:security-improvementsfrom
yeeth-security:fix/security-improvements

Conversation

@janbro
Copy link

@janbro janbro commented Jan 30, 2026 •
edited
Loading

  • HTTP calls were moved outside of any transactional function so that we don't leave database connections open
  • Similarity checks now exclude namespace that the publisher is an owner OR contributor
  • Secret scanning is now much faster for extensions with large bundled files which are typically excluded due to the low probability of secrets

@janbro janbro force-pushed the fix/security-improvements branch from 7679c95 to c33db39 Compare January 30, 2026 18:30
@netomi netomi merged commit 3648f48 into eclipse:security-improvements Jan 30, 2026
1 check passed
netomi pushed a commit that referenced this pull request Feb 5, 2026
@janbro @netomi
Fix/security improvements (#1574)
547d977 
* Fix long running transaction. Fix secret rule

* Fix namespace similarity checks for contributors and new extensions
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@netomi netomi netomi approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@janbro @netomi