zemion

zemion closed issue GovOPlaN/govoplan#2

2026-07-11 16:02:16 +02:00

[Supply-chain] Pin meta Gitea workflow actions to immutable revisions

zemion commented on issue GovOPlaN/govoplan#2

2026-07-11 16:02:11 +02:00

[Supply-chain] Pin meta Gitea workflow actions to immutable revisions

Codex State: done

Summary

Pinned all actions/checkout, actions/setup-python, actions/setup-node, and actions/upload-artifact references in the meta workflows to the current…

zemion opened issue GovOPlaN/govoplan#2

2026-07-11 16:02:06 +02:00

[Supply-chain] Pin meta Gitea workflow actions to immutable revisions

zemion opened issue GovOPlaN/govoplan#1

2026-07-11 16:01:55 +02:00

[Security] Harden meta release/Gitea tooling command and URL trust boundaries

zemion commented on issue GovOPlaN/govoplan-core#244

2026-07-11 14:43:51 +02:00

[Security] Lock audit toolbox dependencies flagged by OSV

Codex state update after rerun audit-reports/govoplan-full-20260711-1422:

filelock, idna, and python-multipart OSV findings cleared.
Remaining OSV finding was only inferred `pip…

zemion created repository GovOPlaN/govoplan-soap

2026-07-11 14:13:29 +02:00

zemion created repository GovOPlaN/govoplan-rest

2026-07-11 14:13:19 +02:00

zemion closed issue GovOPlaN/govoplan-calendar#12

2026-07-11 12:51:48 +02:00

[Security] Add explicit egress policy to calendar sync URL fetches

zemion closed issue GovOPlaN/govoplan-core#237

2026-07-11 12:51:47 +02:00

[Security] Harden installer shell hook execution and command trust boundary

zemion commented on issue GovOPlaN/govoplan-core#232

2026-07-11 12:51:47 +02:00

[Security] Harden module installer shell command hooks

Full audit confirmation from audit-reports/govoplan-full-20260711-1238:

govoplan-core/src/govoplan_core/core/module_installer.py:2614 restart command uses subprocess.run(..., shell=True). …

zemion commented on issue GovOPlaN/govoplan-core#237

2026-07-11 12:51:47 +02:00

[Security] Harden installer shell hook execution and command trust boundary

Closing as duplicate of existing govoplan-core#232. Full-audit evidence has been posted there.

zemion commented on issue GovOPlaN/govoplan-calendar#12

2026-07-11 12:51:47 +02:00

[Security] Add explicit egress policy to calendar sync URL fetches

Closing as duplicate of existing govoplan-calendar#8. Full-audit evidence has been posted there.

zemion commented on issue GovOPlaN/govoplan-calendar#8

2026-07-11 12:51:27 +02:00

[Security] Add egress policy for calendar sync source URLs

Full audit confirmation: audit-reports/govoplan-full-20260711-1238 flags CalDAV/service URL fetches at caldav.py:313 and service.py:752 via Bandit B310/Semgrep dynamic urllib. This matches…

zemion opened issue GovOPlaN/govoplan-tenancy#4

2026-07-11 12:51:26 +02:00

[Debt] Refactor tenant update route complexity

zemion opened issue GovOPlaN/govoplan-policy#7

2026-07-11 12:51:26 +02:00

[Debt] Refactor privacy policy scope update complexity

zemion opened issue GovOPlaN/govoplan-idm#4

2026-07-11 12:51:25 +02:00

[Debt] Refactor IDM assignment workflow guard

zemion opened issue GovOPlaN/govoplan-docs#18

2026-07-11 12:51:25 +02:00

[Debt] Refactor documentation condition visibility logic

zemion opened issue GovOPlaN/govoplan-audit#6

2026-07-11 12:51:24 +02:00

[Debt] Refactor high-complexity audit listing endpoints

zemion opened issue GovOPlaN/govoplan-admin#5

2026-07-11 12:51:23 +02:00

[Debt] Refactor high-complexity admin catalog/settings route helpers

zemion opened issue GovOPlaN/govoplan-access#13

2026-07-11 12:51:23 +02:00

[Debt] Refactor high-complexity access directory/RBAC/admin flows