Albrecht Degering zemion
0 Followers · 0 Following
  • Joined on 2025-08-22
Repositories
1
 Projects Packages Public Activity Starred Repositories
zemion commented on issue GovOPlaN/govoplan-core#240 2026-07-11 17:39:25 +02:00
[Security] Review dynamic SQL text findings and add safe identifier helpers

Codex State: done

Summary

  • Added a safe table-identifier guard for core migration schema reconciliation helpers before quoting identifiers into literal SQL.
  • Guarded the matching dev…
zemion closed issue GovOPlaN/govoplan-core#239 2026-07-11 17:39:21 +02:00
[Security] Centralize outbound URL policy for core fetches and health checks
zemion commented on issue GovOPlaN/govoplan-core#239 2026-07-11 17:39:07 +02:00
[Security] Centralize outbound URL policy for core fetches and health checks

Codex State: done

Summary

  • Strengthened core HTTP URL checks to require absolute HTTP(S), a hostname, and no embedded credentials.
  • Applied the guard to module package catalog fetches,…
zemion closed issue GovOPlaN/govoplan-core#232 2026-07-11 17:39:03 +02:00
[Security] Harden module installer shell command hooks
zemion commented on issue GovOPlaN/govoplan-core#232 2026-07-11 17:38:54 +02:00
[Security] Harden module installer shell command hooks

Codex State: done

Summary

  • Replaced module installer restart and database hook shell=True execution with argv execution via shlex.split.
  • Shell operators, redirects, substitutions,…
zemion closed issue GovOPlaN/govoplan#1 2026-07-11 17:38:51 +02:00
[Security] Harden meta release/Gitea tooling command and URL trust boundaries
zemion commented on issue GovOPlaN/govoplan#1 2026-07-11 17:38:41 +02:00
[Security] Harden meta release/Gitea tooling command and URL trust boundaries

Codex State: done

Summary

  • Replaced release-doctor shell=True execution with argv execution for suggested commands.
  • Added explicit argv definitions for release tagging, migration…
zemion pushed to master at GovOPlaN/govoplan 2026-07-11 17:22:58 +02:00
54ab1945ff Update release refs for v0.1.8
zemion pushed tag v0.1.8 to GovOPlaN/govoplan 2026-07-11 17:18:22 +02:00
zemion pushed tag v0.1.8 to GovOPlaN/govoplan-rest 2026-07-11 17:18:03 +02:00
zemion pushed tag v0.1.8 to GovOPlaN/govoplan-soap 2026-07-11 17:17:35 +02:00
zemion pushed to master at GovOPlaN/govoplan-soap 2026-07-11 17:17:22 +02:00
0503638e4d Initialize GovOPlaN SOAP connector
zemion created branch master in GovOPlaN/govoplan-soap 2026-07-11 17:17:22 +02:00
zemion created branch master in GovOPlaN/govoplan-rest 2026-07-11 17:17:07 +02:00
zemion pushed to master at GovOPlaN/govoplan-rest 2026-07-11 17:17:07 +02:00
ada9f843eb Initialize GovOPlaN REST connector
zemion created branch master in GovOPlaN/govoplan 2026-07-11 17:17:04 +02:00
zemion pushed to master at GovOPlaN/govoplan 2026-07-11 17:17:04 +02:00
70109afc78 Initialize GovOPlaN meta repository
zemion pushed tag v0.1.8 to GovOPlaN/govoplan-core 2026-07-11 17:00:53 +02:00
zemion pushed to main at GovOPlaN/govoplan-core 2026-07-11 17:00:52 +02:00
9a0c467d55 Release v0.1.8
zemion pushed tag v0.1.8 to GovOPlaN/govoplan-xta-osci 2026-07-11 16:55:05 +02:00