jtschladen / lemur / 27297912863

Builds Branch Commit Type Ran Committer Via Coverage
27297912863 jschladen/fix-test-failures-post-ghsa Merge branch 'main' into jschladen/fix-test-failures-post-ghsa push web-flow github
59.88
27297431505 jschladen/fix-test-failures-post-ghsa fix: update tests to reflect GHSA security hardening changes - test_role_put: non-admin users now get 403 (admin-only) before schema validation can return 400 - test_role_put_with_data_and_user: role members no longer permitted to update role... push jtschladen github
59.88
26980609255 jschladen/fix-test-user-service-lint test: add read-only user coverage across all StrictRolePermission-gated endpoints Every write endpoint gated by StrictRolePermission now has an HTTP-level test verifying that a read-only user gets 403. Endpoints covered: - POST /notifications (c... push jtschladen github
60.86
26978985051 jschladen/fix-test-user-service-lint docs: document authz surface and security implications of default-open model Add a security note to LEMUR_STRICT_ROLE_ENFORCEMENT explaining that any authenticated user can manage notifications (webhook SSRF), upload certs to destinations, and ma... push jtschladen github
60.86
26978088232 jschladen/fix-test-user-service-lint fix: remove extra blank line in test_permissions.py (E303) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> push jtschladen github
60.86
26923379791 jschladen/fix-test-user-service-lint test: add read-only user coverage for GHSA-qcqw-jwxc-2hqg Add VALID_READ_ONLY_HEADER_TOKEN (sub=3) and a read-only user fixture to conftest. Tests that read-only users are denied write operations via StrictRolePermission: notification delete (403... push jtschladen github
60.86
26921906730 jschladen/fix-test-user-service-lint fix: block read-only users from write ops without requiring admin/operator The GHSA-qcqw-jwxc-2hqg fix changed LEMUR_STRICT_ROLE_ENFORCEMENT to default True, which correctly closed the empty-needs Flask-Principal bypass but broke normal cert issu... push jtschladen github
60.86
26471797818 main Merge pull request #5464 from Netflix/dependabot/pip/pyopenssl-26.2.0 Build(deps): Bump pyopenssl from 26.1.0 to 26.2.0 push web-flow github
60.86
23616185830 jschladen/fix-auth Update lemur/auth/service.py Co-authored-by: Sayali Charhate <charhate@usc.edu> push web-flow github
60.86
23615843703 jschladen/fix-auth Add test push jtschladen github
60.86
23615425359 jschladen/fix-auth Fix jwt parsing push jtschladen github
60.86
23610205394 jschladen/fix-issues Fix logger push jtschladen github
60.86
23573951798 jschladen/pin-otel fix push jtschladen github
60.86
23568226230 jschladen/sync-fixes Merge branch 'main' into jschladen/sync-fixes push web-flow github
60.86
23566183082 jschladen/refreshable-credentials Refreshable credentials push jtschladen github
60.86