Skip to content

fix(rate-limit): tighten rate limits on test notification endpoints#115613

Merged
nora-shap merged 1 commit into
masterfrom
nora/send-test-notification-rate-limits
May 15, 2026
Merged

fix(rate-limit): tighten rate limits on test notification endpoints#115613
nora-shap merged 1 commit into
masterfrom
nora/send-test-notification-rate-limits

Conversation

@nora-shap
Copy link
Copy Markdown
Member

The test-fire-action endpoints had no meaningful rate limiting to prevent abuse, let's tighten this up.

Before

Layer Limit Scope
Endpoint-level Default (999/sec) Per-user
creation_quota 1000/hr Per-project

After

Layer Limit Scope
Endpoint-level 10/min Per-user
Endpoint-level 50/min Per-org
creation_quota 100/hr Per-project

The new creation_quota aligns with other low-volume issue types (metric alerts, processing errors) that also use 100/hr.

@nora-shap nora-shap requested review from a team as code owners May 14, 2026 23:30
@github-actions github-actions Bot added the Scope: Backend Automatically applied to PRs that change backend components label May 14, 2026
@nora-shap nora-shap requested a review from a team May 15, 2026 17:24
@nora-shap nora-shap merged commit 3c9739a into master May 15, 2026
58 of 63 checks passed
@nora-shap nora-shap deleted the nora/send-test-notification-rate-limits branch May 15, 2026 19:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Scope: Backend Automatically applied to PRs that change backend components

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants