Repository navigation
test: fix V2 test-harness drift (chat image refs, auto-open fixture, harness seeds) #395
paullizermalicious-pr-security-review.yml
on: pull_request
malicious-pr-security-review
21s
Annotations
10 warnings and 1 notice
|
malicious-pr-security-review:
functional_tests/test_block_revision_assist.py#L184
Important - Changed line contains security control, sanitization, or audit marker. Recommendation%3A Confirm the change does not weaken auth, CSRF, CSP, XSS defenses, settings sanitization, redaction, audit logging, or tests.
|
|
malicious-pr-security-review:
functional_tests/test_block_revision_assist.py#L182
Important - Changed line contains AI, plugin, agent, or workspace boundary marker. Recommendation%3A Check whether prompts, chat history, uploaded documents, embeddings, citations, settings, or identity can cross a new boundary.
|
|
malicious-pr-security-review:
functional_tests/test_block_revision_assist.py#L181
Important - Changed line contains AI, plugin, agent, or workspace boundary marker. Recommendation%3A Check whether prompts, chat history, uploaded documents, embeddings, citations, settings, or identity can cross a new boundary.
|
|
malicious-pr-security-review:
functional_tests/test_app_settings_auxiliary_writers.py#L457
Important - Changed line contains AI, plugin, agent, or workspace boundary marker. Recommendation%3A Check whether prompts, chat history, uploaded documents, embeddings, citations, settings, or identity can cross a new boundary.
|
|
malicious-pr-security-review:
functional_tests/test_app_settings_auxiliary_writers.py#L456
Important - Changed line contains security control, sanitization, or audit marker. Recommendation%3A Confirm the change does not weaken auth, CSRF, CSP, XSS defenses, settings sanitization, redaction, audit logging, or tests.
|
|
malicious-pr-security-review:
functional_tests/test_app_settings_auxiliary_writers.py#L453
Important - Changed line contains security control, sanitization, or audit marker. Recommendation%3A Confirm the change does not weaken auth, CSRF, CSP, XSS defenses, settings sanitization, redaction, audit logging, or tests.
|
|
malicious-pr-security-review:
functional_tests/test_app_settings_auxiliary_writers.py#L450
Important - Changed line contains AI, plugin, agent, or workspace boundary marker. Recommendation%3A Check whether prompts, chat history, uploaded documents, embeddings, citations, settings, or identity can cross a new boundary.
|
|
malicious-pr-security-review:
functional_tests/test_app_settings_auxiliary_writers.py#L449
Important - Changed line contains AI, plugin, agent, or workspace boundary marker. Recommendation%3A Check whether prompts, chat history, uploaded documents, embeddings, citations, settings, or identity can cross a new boundary.
|
|
malicious-pr-security-review:
functional_tests/test_app_settings_auxiliary_writers.py#L449
Moderate - Changed line contains obfuscation, dynamic loading, or hidden payload marker. Recommendation%3A Confirm the changed code is not hiding behavior, decoding payloads, or bypassing normal review.
|
|
malicious-pr-security-review:
functional_tests/test_app_settings_auxiliary_writers.py#L29
Important - Changed line contains security control, sanitization, or audit marker. Recommendation%3A Confirm the change does not weaken auth, CSRF, CSP, XSS defenses, settings sanitization, redaction, audit logging, or tests.
|
|
malicious-pr-security-review
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
malicious-pr-security-review
|
5.42 KB |
sha256:d8b179275c4c5a165ac5d77cd31ce2afff2575e7675035246601ed4f89b6063e
|
|