Skip to content

SyncVey v0.9.1

Latest

Choose a tag to compare

@MR-TABATA MR-TABATA released this 23 Oct 12:24
· 3 commits to main since this release

Internal code health, security hardening, and branding consistency updates.

  • TOTP application issuer name: Updated the 2FA authenticator issuer name from legacy Cloud Asset Manager to SyncVey (views.py).
  • Membership role update authorization: Hardened membership_update_view to enforce organization scope lookup, returning 404 rather than 403 on cross-organization member IDs to prevent ID existence discovery.
  • Vulnerability scan loop variable binding: Explicitly bound loop variables (eco, name, version) in vulnerability record builder lambda to prevent potential closure rebinding issues (vulns.py).
  • Cleaned up imports and dead code: Removed unused imports across views.py, apps.py, repo_import.py, and scheduler.py, and dropped unused topology local variable others.