-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
agent/build.sh: sha256sum -c mis-parses a jar path containing backslash/newline, deleting a good jar
audit:securityFinding from a security auditFinding from a security auditStatus: Open.#49 In ghostpsalm/DreamConnect;agent/build.sh: ByteBuddy jar is verified then reread — a swap during the build window bypasses the #43 checksum check
audit:securityFinding from a security auditFinding from a security auditStatus: Open.#48 In ghostpsalm/DreamConnect;install.sh: build.sh's stderr is discarded, so a ByteBuddy checksum failure shows only a bare sha256sum warning
audit:securityFinding from a security auditFinding from a security auditStatus: Open.#47 In ghostpsalm/DreamConnect;agent/test_build.sh: the happy-path case silently skips on every clean checkout, so a permanently-broken build.sh would still pass the gate
audit:securityFinding from a security auditFinding from a security auditStatus: Open.#46 In ghostpsalm/DreamConnect;daemon: control-socket bind()->chmod() TOCTOU under a permissive umask
audit:securityFinding from a security auditFinding from a security auditStatus: Open.#45 In ghostpsalm/DreamConnect;daemon: GEOM can read a mismatched width/height during a resolution change
audit:qualityFinding from a quality auditFinding from a quality auditStatus: Open.#44 In ghostpsalm/DreamConnect;agent/build.sh: verify the ByteBuddy jar's SHA-256 after download
audit:securityFinding from a security auditFinding from a security auditStatus: Open.#43 In ghostpsalm/DreamConnect;- Status: Open.#41 In ghostpsalm/DreamConnect;
- Status: Open.#40 In ghostpsalm/DreamConnect;
- Status: Open.#38 In ghostpsalm/DreamConnect;
- Status: Open.#37 In ghostpsalm/DreamConnect;
- Status: Open.#36 In ghostpsalm/DreamConnect;