Skip to content

Actions: SecureBananaLabs/bug-bounty

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
2,500+ workflow runs
2,500+ workflow runs

Filter by Workflow

⌥ + click/return to exclude

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix: SBL security #8207 - reject inverted job budget ranges in validation Update PR leaderboard #5239: Pull request #8263 opened by gtx20060124-bot
13s
13s
fix: validate refresh token instead of ignoring it (Closes #1775) Update PR leaderboard #5238: Pull request #8262 opened by gtx20060124-bot
9s
9s
fix: SBL security #8237 - restrict CORS to allowed origins via CORS_ORIGIN env var Update PR leaderboard #5237: Pull request #8261 opened by gtx20060124-bot
11s
11s
fix: enforce authentication on payment endpoint (Closes #2757) Update PR leaderboard #5236: Pull request #8260 opened by gtx20060124-bot
12s
12s
fix: enforce authentication on job creation endpoint (Closes #1776) Update PR leaderboard #5235: Pull request #8259 opened by gtx20060124-bot
10s
10s
fix: security hardening - CORS, input validation, ID injection prevention Update PR leaderboard #5234: Pull request #8258 opened by gtx20060124-bot
10s
10s
Gaotax2006 [ DevEx ] discover test files with glob pattern (#8195) Update PR leaderboard #5233: Pull request #8257 opened by gtx20060124-bot
10s
10s
Gaotax2006 [ DevEx ] expose runtime JS entrypoint for @freelanceflow/ui (#8199) Update PR leaderboard #5232: Pull request #8256 opened by gtx20060124-bot
12s
12s
Gaotax2006 [ DevEx ] log actual ephemeral port on startup (#8197) Update PR leaderboard #5231: Pull request #8255 opened by gtx20060124-bot
13s
13s
Gaotax2006 [ Security ] reject inverted budget ranges in create and partial-update (#8207) Update PR leaderboard #5230: Pull request #8254 opened by gtx20060124-bot
10s
10s
Gaotax2006 [ Security ] validate notification schema and preserve server-owned defaults (#8209) Update PR leaderboard #5229: Pull request #8253 opened by gtx20060124-bot
11s
11s
Fix/refresh token validation Update PR leaderboard #5228: Pull request #8252 opened by hyperfeng007
15s
15s
Gaotax2006 [ Security ] return 400 for malformed JSON, 413 for oversized (#8191) Update PR leaderboard #5227: Pull request #8251 opened by gtx20060124-bot
12s
12s
Gaotax2006 [ Security ] add 10MB upload file size limit (#8193) Update PR leaderboard #5226: Pull request #8250 opened by gtx20060124-bot
10s
10s
Gaotax2006 [ Security ] validate message fields and preserve server-owned id (#8201) Update PR leaderboard #5225: Pull request #8249 opened by gtx20060124-bot
14s
14s
Gaotax2006 [ Security ] validate review fields and preserve server-owned id (#8203) Update PR leaderboard #5224: Pull request #8248 opened by gtx20060124-bot
10s
10s
Gaotax2006 [ Security ] ignore caller-controlled id in proposal creation (#8211) Update PR leaderboard #5223: Pull request #8247 opened by gtx20060124-bot
13s
13s
Gaotax2006 [ Security ] return defensive snapshot from proposal list (#8213) Update PR leaderboard #5222: Pull request #8246 opened by gtx20060124-bot
11s
11s
Gaotax2006 [ Security ] omit password fields from user creation response (#8215) Update PR leaderboard #5221: Pull request #8245 opened by gtx20060124-bot
10s
10s
Gaotax2006 [ Security ] reject inverted job budget ranges in create and update (#8225) Update PR leaderboard #5220: Pull request #8244 opened by gtx20060124-bot
14s
14s
Gaotax2006 [ Security ] prevent client-controlled id and read state in notifications (#8226) Update PR leaderboard #5219: Pull request #8243 opened by gtx20060124-bot
14s
14s
Gaotax2006 [ Security ] enforce default status field in job creation (#8235) Update PR leaderboard #5218: Pull request #8242 opened by gtx20060124-bot
10s
10s
Gaotax2006 [ Security ] reject missing or blank search queries (#8205) Update PR leaderboard #5217: Pull request #8241 opened by gtx20060124-bot
12s
12s
Gaotax2006 [ Security ] fix CORS restriction and add CORS_ORIGIN env var (#8237) Update PR leaderboard #5216: Pull request #8240 opened by gtx20060124-bot
15s
15s
fix: enforce default job status on creation (mass assignment) Update PR leaderboard #5215: Pull request #8239 opened by kish-00
15s
15s