hyperscale-stack / security
98%

DEFAULT BRANCH: master
Repo Added
Token eXsCYvUeMzR6iIXtqrlWZXFVqTZ43wOX2 regen
Build 262 Last
Files 224
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH master
branch: master
CHANGE BRANCH
x
Sync Branches

coverage: 98.159% (-0.4%) from 98.583%
Relevant lines Covered
15699 RELEVANT LINES 15410 COVERED LINES
4962.26 HITS PER LINE
Source Files on master

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
39679290958 master fix(stores)!: close the 2026-10-21 security audit findings of the stores Close the store findings of the security audit of 2026-10-21. - MySQL DDL of the oauth2, oidc/client and saml/sp SQL stores names ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; o... push web-flow github
98.16
39675729816 master fix(oidc/client)!: close the security audit findings of the OIDC client Close the OIDC client findings of the security audit of 2026-10-21. - Every secret of the API is an oidcclient.Secret (NewSecret, Reveal): fmt, slog and encoding/json rend... push web-flow github
98.58
39674179875 master fix(oauth2,oidc)!: harden the authorization endpoint, issuer and metadata Harden the authorization endpoint, the issuer and the metadata after the security audit of 2026-10-21. - Redirect URIs: outside Profile20 an http redirect URI must be the ... push web-flow github
98.58
39661770652 master fix(core)!: close the core findings of the 2026-10-21 security audit Close the core, adapter, basic, bearer, password, outbound and session findings of the security audit of 2026-10-21. - basic: opt-in attempt limiting through the core AttemptLi... push web-flow github
98.57
39660049309 master fix(oidc)!: close the OpenID Provider findings of the 2026-10-21 security audit Close the OpenID Provider findings of the security audit of 2026-10-21. - Claim names: a name tagged with a well-formed BCP 47 language tag (RFC 5646, strict gramm... push web-flow github
98.56
39658414364 master fix(saml)!: close the 2026-10-21 security audit findings of the SAML SP Close the SAML Service Provider findings of the security audit of 2026-10-21. - Metadata import trusts one certificate per KeyDescriptor: a KeyDescriptor carrying several ... push web-flow github
98.54
39652388552 master feat(core): add the AttemptLimiter and a bounded in-memory throttle Add attempt limiting to the core (security audit of 2026-10-21: D-20, and the shared basis of D-01 and F-07). - security.AttemptLimiter: Allow reserves and charges an attempt in... push web-flow github
98.53
39652075769 master fix(jwt)!: close the jwt findings of the 2026-10-21 security audit Close the jwt findings of the security audit of 2026-10-21. - RSASSA-PSS (PS256/384/512) signatures must use a salt of the hash size (RFC 7518 §3.5); signers backed by an opaqu... push web-flow github
98.51
39650132996 master build: move to Go 1.27.3, add OSV-Scanner and a security policy Close the supply-chain findings of the security audit of 2026-10-21. - Every module, tool module and go.work requires Go 1.27.3: Go 1.27.2 carries GO-2026-6809 (crypto/x509 distru... push web-flow github
98.5
39581499514 master fix(jwt,oidc)!: refuse key-bearing JOSE headers, upgrade go-jose to v4.1.6 Close the only High finding of the security audit of 2026-10-21: an unauthenticated JWS could make go-jose (<= v4.1.5) validate an attacker-supplied RSA private key from i... push web-flow github
98.49
See All Builds (262)

Badge your Repo: security

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh