• Joined on 2025-08-22
zemion opened issue GovOPlaN/govoplan-core#262 2026-07-14 00:13:18 +02:00
[Debt] Optimize dev-server reload behavior with many enabled modules
zemion commented on issue GovOPlaN/govoplan-core#255 2026-07-14 00:12:39 +02:00
[Security audit] Replace silent core exception handling with narrow logging

Codex State: done

Summary

  • Replaced core silent best-effort exception handling with narrow exceptions, explicit fallback returns, or debug logging.

Changed Files

  • `src/govoplan_cor…
zemion closed issue GovOPlaN/govoplan-core#255 2026-07-14 00:12:39 +02:00
[Security audit] Replace silent core exception handling with narrow logging
zemion closed issue GovOPlaN/govoplan-mail#14 2026-07-14 00:09:25 +02:00
[Security audit] Replace silent IMAP/SMTP exception handling with narrow logging
zemion commented on issue GovOPlaN/govoplan-mail#14 2026-07-14 00:09:24 +02:00
[Security audit] Replace silent IMAP/SMTP exception handling with narrow logging

Codex State: done

Summary

  • Replaced silent SMTP/IMAP cleanup exception handlers with debug logging that avoids credentials and message content.

Changed Files

  • `src/govoplan_mail/ba…
zemion closed issue GovOPlaN/govoplan-campaign#57 2026-07-13 20:20:47 +02:00
[Security audit] Replace production asserts with explicit campaign errors
zemion commented on issue GovOPlaN/govoplan-campaign#57 2026-07-13 20:20:47 +02:00
[Security audit] Replace production asserts with explicit campaign errors

Codex State: done

Summary

  • Replaced production asserts in campaign version persistence, execution snapshots, and send job reload paths with explicit domain errors.

Changed Files

-…

zemion commented on issue GovOPlaN/govoplan-calendar#15 2026-07-13 20:19:24 +02:00
[Security audit] Harden CalDAV/WebCal remote fetch and XML parsing

Codex State: done

Summary

  • Removed remaining stdlib XML imports from calendar backend parsing paths; parsing continues through defusedxml SafeElementTree.
  • Added narrow Bandit B310…
zemion closed issue GovOPlaN/govoplan-calendar#15 2026-07-13 20:19:24 +02:00
[Security audit] Harden CalDAV/WebCal remote fetch and XML parsing
zemion closed issue GovOPlaN/govoplan#5 2026-07-13 20:16:22 +02:00
[Security audit] Split production and test scanner profiles to reduce false positives
zemion commented on issue GovOPlaN/govoplan#5 2026-07-13 20:16:22 +02:00
[Security audit] Split production and test scanner profiles to reduce false positives

Codex State: done

Summary

  • Split Bandit/Ruff security reports into production-gating src reports and separate non-gating test reports.
  • Kept production security checks strict while…
zemion commented on issue GovOPlaN/govoplan-core#256 2026-07-13 20:15:04 +02:00
[Security audit] Document safe SQLAlchemy text usage in migration helpers

Codex State: done

Summary

  • Added narrow B608 suppressions to validated, dialect-quoted migration helper SQL construction.

Changed Files

  • src/govoplan_core/db/migrations.py

###…

zemion closed issue GovOPlaN/govoplan-core#256 2026-07-13 20:15:04 +02:00
[Security audit] Document safe SQLAlchemy text usage in migration helpers
zemion opened issue GovOPlaN/govoplan-addresses#12 2026-07-13 20:11:32 +02:00
[Audit] Refactor vCard parsing and serialization complexity hotspots
zemion opened issue GovOPlaN/govoplan-mail#14 2026-07-13 20:11:29 +02:00
[Security audit] Replace silent IMAP/SMTP exception handling with narrow logging
zemion opened issue GovOPlaN/govoplan-files#29 2026-07-13 20:11:15 +02:00
[Audit] Refactor files transfer and campaign-usage complexity hotspots
zemion opened issue GovOPlaN/govoplan-campaign#58 2026-07-13 20:11:11 +02:00
[Audit] Refactor campaign validation, persistence, and sending complexity hotspots
zemion opened issue GovOPlaN/govoplan-campaign#57 2026-07-13 20:10:57 +02:00
[Security audit] Replace production asserts with explicit campaign errors
zemion opened issue GovOPlaN/govoplan-calendar#16 2026-07-13 20:10:52 +02:00
[Audit] Refactor CalDAV and iCalendar parsing complexity hotspots
zemion opened issue GovOPlaN/govoplan-calendar#15 2026-07-13 20:10:47 +02:00
[Security audit] Harden CalDAV/WebCal remote fetch and XML parsing