github-starred/flowsint
2
0
Fork 0
mirror of https://github.com/reconurge/flowsint.git synced 2026-11-10 01:45:55 -06:00
Code Issues 988 Packages Projects Releases 15 Wiki Activity

[PR #148] [MERGED] fix: security issues #3721

New Issue
Closed
opened 2026-07-12 09:14:30 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-07-12 09:14:30 -05:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/reconurge/flowsint/pull/148
Author: @dextmorgn
Created: 5/30/2026
Status: ✅ Merged
Merged: 5/30/2026
Merged by: @dextmorgn

Base: main ← Head: fix/phase1-critical

📝 Commits (5)

  • c9d594a fix(api): load AUTH_SECRET from validated core.auth source
  • dd00bae fix(api): run production container as non-root flowsint user
  • ee06d6c fix(api): restrict CORS origins via ALLOWED_ORIGINS env
  • 1d409d7 fix(scan): persist results to existing details column, errors to error column
  • e8ca7b3 fix(types): apply extra=allow via Pydantic v2 model_config

📊 Changes

8 files changed (+24 additions, -25 deletions)

View changed files

📝 .env.example (+2 -0)
📝 flowsint-api/Dockerfile (+1 -1)
📝 flowsint-api/app/api/deps.py (+1 -9)
📝 flowsint-api/app/api/schemas/scan.py (+1 -1)
📝 flowsint-api/app/main.py (+7 -1)
📝 flowsint-core/src/flowsint_core/tasks/enricher.py (+6 -6)
📝 flowsint-core/src/flowsint_core/tasks/flow.py (+3 -3)
📝 flowsint-types/src/flowsint_types/flowsint_base.py (+3 -4)

📄 Description

No description provided

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/reconurge/flowsint/pull/148 **Author:** [@dextmorgn](https://github.com/dextmorgn) **Created:** 5/30/2026 **Status:** ✅ Merged **Merged:** 5/30/2026 **Merged by:** [@dextmorgn](https://github.com/dextmorgn) **Base:** `main` ← **Head:** `fix/phase1-critical` --- ### 📝 Commits (5) - [`c9d594a`](https://github.com/reconurge/flowsint/commit/c9d594a8e7bf1a4d7cdaf665d458a4c6d072efa4) fix(api): load AUTH_SECRET from validated core.auth source - [`dd00bae`](https://github.com/reconurge/flowsint/commit/dd00bae9ceaae00fae1b942fbab41658a3a1ba27) fix(api): run production container as non-root flowsint user - [`ee06d6c`](https://github.com/reconurge/flowsint/commit/ee06d6cf3e9af71fe40d526fe9581bb8c2d4d051) fix(api): restrict CORS origins via ALLOWED_ORIGINS env - [`1d409d7`](https://github.com/reconurge/flowsint/commit/1d409d7929b4c777fdf4ffe23c90cacefc0317a3) fix(scan): persist results to existing details column, errors to error column - [`e8ca7b3`](https://github.com/reconurge/flowsint/commit/e8ca7b39bf7c73debfe5f29ccb3ea8446b85f424) fix(types): apply extra=allow via Pydantic v2 model_config ### 📊 Changes **8 files changed** (+24 additions, -25 deletions) <details> <summary>View changed files</summary> 📝 `.env.example` (+2 -0) 📝 `flowsint-api/Dockerfile` (+1 -1) 📝 `flowsint-api/app/api/deps.py` (+1 -9) 📝 `flowsint-api/app/api/schemas/scan.py` (+1 -1) 📝 `flowsint-api/app/main.py` (+7 -1) 📝 `flowsint-core/src/flowsint_core/tasks/enricher.py` (+6 -6) 📝 `flowsint-core/src/flowsint_core/tasks/flow.py` (+3 -3) 📝 `flowsint-types/src/flowsint_types/flowsint_base.py` (+3 -4) </details> ### 📄 Description _No description provided_ --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-07-12 09:14:30 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
documentation
duplicate
enhancement
pull-request
Mirrored from GitHub Pull Request
No labels pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
GiteaMirror ninjasurge (Kaehlen Rog)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/flowsint#3721