-
Notifications
You must be signed in to change notification settings - Fork 68
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
MockTipVerifieris the *only*TipVerifierimplementation exercised by the majority of the integration test suite — confirm the realStellarService::verify_tippath has proportionate coveragedifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardtestingTest coverage, fuzzing, property testingTest coverage, fuzzing, property testingThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#404 In Bonizozo/stellar-tipjar-backend;Consolidate
.cargo/config.toml/rust-toolchain.tomlhistory into a documented contributor setup guide, so the Windows-cross-compile regression found in this audit can't recur silentlyci/cdContinuous integration and deliveryContinuous integration and deliverydifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortdocumentationImprovements or additions to documentationImprovements or additions to documentationGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#403 In Bonizozo/stellar-tipjar-backend;EncryptionKeyManagerVault client has no configured request timeout distinct from the generalreqwest::ClientbugSomething isn't workingSomething isn't workingdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardperformancePerformance, scalability, or resource usagePerformance, scalability, or resource usageThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#402 In Bonizozo/stellar-tipjar-backend;RATE_LIMIT_WHITELISTenv-var IP whitelist — confirm it can't be trivially bypassed via a spoofedX-Forwarded-For-adjacent header outside the trusted-proxy-depth mechanismdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardsecuritySecurity hardening or vulnerability workSecurity hardening or vulnerability workThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#401 In Bonizozo/stellar-tipjar-backend;Cargo workspace has 101+
cargo checkwarnings (dead code, unused fields) — establish a warnings budget/CI gateci/cdContinuous integration and deliveryContinuous integration and deliverydifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#400 In Bonizozo/stellar-tipjar-backend;sharding::strategy::fnv1a_shard— confirm the hashing scheme supports resharding without a full data migrationarchitectureStructural or architectural changeStructural or architectural changedifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardperformancePerformance, scalability, or resource usagePerformance, scalability, or resource usageThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#399 In Bonizozo/stellar-tipjar-backend;axum-test's default mock transport doesn't populateConnectInfo— audit every test file that constructsTestServerdirectly rather than through the shared helper for the same rate-limiter failure modebugSomething isn't workingSomething isn't workingdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardtestingTest coverage, fuzzing, property testingTest coverage, fuzzing, property testingThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#398 In Bonizozo/stellar-tipjar-backend;.env.testand CI workflow don't setENCRYPTION_KEY_CURRENT— any test exercisingsrc/tests/integration_test_setup.rs::build_appfails outside of manually-configured local environmentsbugSomething isn't workingSomething isn't workingci/cdContinuous integration and deliveryContinuous integration and deliverydifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#397 In Bonizozo/stellar-tipjar-backend;webhook_security_test.rs— 1 test failing; confirm it isn't the signature-verification test specificallybugSomething isn't workingSomething isn't workingdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardsecuritySecurity hardening or vulnerability workSecurity hardening or vulnerability worktestingTest coverage, fuzzing, property testingTest coverage, fuzzing, property testingThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#396 In Bonizozo/stellar-tipjar-backend;security_test.rs— 3 tests failing; these are exactly the tests where a false negative is most costlybugSomething isn't workingSomething isn't workingdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardsecuritySecurity hardening or vulnerability workSecurity hardening or vulnerability worktestingTest coverage, fuzzing, property testingTest coverage, fuzzing, property testingThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#395 In Bonizozo/stellar-tipjar-backend;location_test.rs— 8 of 12 tests failing; audit the creator-location/PostGIS feature end-to-endbugSomething isn't workingSomething isn't workingdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardtestingTest coverage, fuzzing, property testingTest coverage, fuzzing, property testingThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#394 In Bonizozo/stellar-tipjar-backend;Multi-tenancy quota enforcement (
max_creators/max_tips_per_day) — confirm it's actually enforced anywhere, given the underlying schema doesn't currently have those columnsarchitectureStructural or architectural changeStructural or architectural changebugSomething isn't workingSomething isn't workingdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#393 In Bonizozo/stellar-tipjar-backend;