Repository navigation
Harden File Sync endpoint validation against SSRF - #1738
Merged
Paul Lizer (paullizer) merged 3 commits intoOct 9, 2026
Merged
Paul Lizer (paullizer) merged 3 commits into
Paul Lizer (paullizer) merged 3 commits into
Annotations
10 warnings and 1 notice
|
Run malicious PR static security review:
docs/explanation/features/v0.241.127/AZURE_FILES_FILE_SYNC.md#L40
Important - Changed line contains secret or sensitive data source marker. Recommendation%3A Pair this source with any nearby network, logging, serialization, or process execution sink before approving.
|
|
Run malicious PR static security review:
docs/explanation/features/v0.241.127/AZURE_FILES_FILE_SYNC.md#L39
Important - Changed line contains security control, sanitization, or audit marker. Recommendation%3A Confirm the change does not weaken auth, CSRF, CSP, XSS defenses, settings sanitization, redaction, audit logging, or tests.
|
|
Run malicious PR static security review:
docs/explanation/features/v0.241.127/AZURE_FILES_FILE_SYNC.md#L38
Important - Changed line contains secret or sensitive data source marker. Recommendation%3A Pair this source with any nearby network, logging, serialization, or process execution sink before approving.
|
|
Run malicious PR static security review:
docs/explanation/features/v0.241.127/AZURE_FILES_FILE_SYNC.md#L35
Important - Changed line contains external connection or remote asset marker. Recommendation%3A Review whether changed code can send prompts, files, credentials, cookies, settings, logs, or user data to a new sink.
|
|
Run malicious PR static security review:
application/single_app/functions_file_sync.py#L896
Important - Changed line contains security control, sanitization, or audit marker. Recommendation%3A Confirm the change does not weaken auth, CSRF, CSP, XSS defenses, settings sanitization, redaction, audit logging, or tests.
|
|
Run malicious PR static security review:
application/single_app/functions_file_sync.py#L48
Important - Changed line contains security control, sanitization, or audit marker. Recommendation%3A Confirm the change does not weaken auth, CSRF, CSP, XSS defenses, settings sanitization, redaction, audit logging, or tests.
|
|
Run malicious PR static security review:
application/single_app/functions_azure_endpoint_validation.py#L252
Important - Changed line contains security control, sanitization, or audit marker. Recommendation%3A Confirm the change does not weaken auth, CSRF, CSP, XSS defenses, settings sanitization, redaction, audit logging, or tests.
|
|
Run malicious PR static security review:
application/single_app/functions_azure_endpoint_validation.py#L252
Important - Changed line contains secret or sensitive data source marker. Recommendation%3A Pair this source with any nearby network, logging, serialization, or process execution sink before approving.
|
|
Run malicious PR static security review:
application/single_app/functions_azure_endpoint_validation.py#L250
Important - Changed line contains security control, sanitization, or audit marker. Recommendation%3A Confirm the change does not weaken auth, CSRF, CSP, XSS defenses, settings sanitization, redaction, audit logging, or tests.
|
|
Run malicious PR static security review:
application/single_app/functions_azure_endpoint_validation.py#L91
Important - Changed line contains external connection or remote asset marker. Recommendation%3A Review whether changed code can send prompts, files, credentials, cookies, settings, logs, or user data to a new sink.
|
|
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
background
wait
wait-all
cancel
parallel
Loading