Automated triage by `ralph triage --suggest` — each item is a suggested fix to review: - [ ] **[error] code-scan** — https://github.com/resq-software/programs/security/code-scanning/22 - [ ] **[error] code-scan** — https://github.com/resq-software/programs/security/code-scanning/23 - [ ] **[medium] ci** — Agentic Maintenance failed on main (https://github.com/resq-software/programs/actions/runs/30051572216) - [ ] **[medium] ci** — Duplicate Code Detector failed on main (https://github.com/resq-software/programs/actions/runs/29529233965) - [ ] **[medium] ci** — security failed on main (https://github.com/resq-software/programs/actions/runs/29724321641) - [ ] **[medium] ci** — security failed on main (https://github.com/resq-software/programs/actions/runs/30246046258) - [ ] **[medium] ci** — security failed on main (https://github.com/resq-software/programs/actions/runs/30401651139) - [ ] **[medium] dependabot** — ed25519-dalek: `ed25519-dalek` Double Public Key Signing Function Oracle Attack (https://github.com/resq-software/programs/security/dependabot/4) - [ ] **[low] dependabot** — curve25519-dalek: curve25519-dalek has timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub` (https://github.com/resq-software/programs/security/dependabot/5) - [ ] **[low] dependabot** — rand: Rand is unsound with a custom logger using rand::rng() (https://github.com/resq-software/programs/security/dependabot/14) - [ ] **[note] code-scan** — https://github.com/resq-software/programs/security/code-scanning/24 - [ ] **[note] code-scan** — https://github.com/resq-software/programs/security/code-scanning/25 - [ ] **[note] code-scan** — https://github.com/resq-software/programs/security/code-scanning/26 - [ ] **[note] code-scan** — https://github.com/resq-software/programs/security/code-scanning/27 - [ ] **[note] code-scan** — https://github.com/resq-software/programs/security/code-scanning/28 - [ ] **[note] code-scan** — https://github.com/resq-software/programs/security/code-scanning/29 - [ ] **[note] code-scan** — https://github.com/resq-software/programs/security/code-scanning/30 - [ ] **[note] code-scan** — https://github.com/resq-software/programs/security/code-scanning/31 - [ ] **[note] code-scan** — https://github.com/resq-software/programs/security/code-scanning/32 - [ ] **[note] code-scan** — https://github.com/resq-software/programs/security/code-scanning/33 <!-- ralph-triage -->
Automated triage by
ralph triage --suggest— each item is a suggested fix to review:ed25519-dalekDouble Public Key Signing Function Oracle Attack (https://github.com/resq-software/programs/security/dependabot/4)curve25519-dalek'sScalar29::sub/Scalar52::sub(https://github.com/resq-software/programs/security/dependabot/5)