Merge pull request #70 from andreibesleaga/fix/ci-security-advisory-floors

sec(deps): clear all HIGH advisories via override floors; fix OSV SARIF gate

Author: andreibesleaga

.env.example

@@ -67,6 +67,12 @@ OPENAI_API_KEY=your_openai_api_key_here
 # MISTRAL_API_KEY=
 # GROQ_API_KEY=
 
+# Opt out of KaibanJS anonymous telemetry (any non-empty value = opt out).
+# ⚠ Set to 1 on networks that block nom.telemetrydeck.com at DNS level — the
+# blocked telemetry fetch otherwise crashes the agent process with an unhandled
+# rejection inside kaibanjs before the first task completes.
+# KAIBAN_TELEMETRY_OPT_OUT=1
+
 # ── Security: mTLS (optional) ──────────────────────────────────
 # Paths to TLS certificates for Redis/Kafka mTLS connections
 # Generate self-signed certs: ./scripts/generate-dev-certs.sh

.github/workflows/ci.yml

@@ -107,7 +107,13 @@ jobs:
             --format=sarif
             --output=osv.sarif
       - name: Upload OSV SARIF
-        if: always()
+        # `always()` so the SARIF still uploads even when the OSV-Scanner step
+        # itself errors after writing the file (it runs continue-on-error). The
+        # `hashFiles` guard covers the other path: when an earlier gate (e.g. the
+        # audit) fails, OSV-Scanner is skipped and osv.sarif never exists — an
+        # unguarded upload then adds a bogus second failure ("Path does not
+        # exist: osv.sarif") that masks the real one.
+        if: always() && hashFiles('osv.sarif') != ''
         uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: osv.sarif

.github/workflows/scorecard.yml

@@ -20,7 +20,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-      - uses: ossf/scorecard-action@v2.4.3
+      - uses: ossf/scorecard-action@v2.4.4
         with:
           results_file: results.sarif
           results_format: sarif

CHANGELOG.md

@@ -6,6 +6,25 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+### Security
+- Raised the transitive `overrides` security floors to clear every open HIGH advisory
+  in the locked tree: `brace-expansion` >=5.0.8 (GHSA-3jxr-9vmj-r5cp,
+  GHSA-mh99-v99m-4gvg), `fast-uri` >=4.1.1 (GHSA-v2hh-gcrm-f6hx,
+  GHSA-4c8g-83qw-93j6), `js-yaml` >=4.3.0 <5 (GHSA-52cp-r559-cp3m) and `postcss`
+  >=8.5.25 (GHSA-r28c-9q8g-f849). Also cleared the remaining moderates:
+  `hono` >=4.12.32, `protobufjs` >=8.6.6, and `@modelcontextprotocol/sdk` 1.30.0 with
+  `@hono/node-server` 2.0.12 (GHSA-frvp-7c67-39w9). `npm audit` now reports
+  **0 vulnerabilities** at the root and in `board/`, and the Trivy image gate passes
+  with no fixable CRITICAL/HIGH.
+
+### Changed
+- `ossf/scorecard-action` 2.4.3 → 2.4.4.
+
+### Fixed
+- CI: the `Upload OSV SARIF` step no longer fails with "Path does not exist:
+  osv.sarif" when an earlier gate fails — it is now guarded on the file existing,
+  so a failing audit reports one real error instead of two.
+
 ## [2.0.0] - in progress (`feat/v2.0`)
 
 Major release — breaking changes are documented in `MIGRATION.md`. Authoritative plan:

SECURITY.md

@@ -38,19 +38,32 @@ provenance and a Sigstore (cosign keyless) signature.
 Several transitive advisories reach the tree via `@langchain/*` (used by
 `kaibanjs`) and the OpenTelemetry/gRPC stack. `package.json` `overrides` pin
 patched versions: `@langchain/core`, `@langchain/community`, `langchain`,
-`langsmith`, `axios`, `protobufjs`, `@grpc/grpc-js`, `ws`, `hono`, `fast-uri`,
-`fast-xml-parser`, `qs`, `uuid`, `ip-address`, `expr-eval`, `file-type`, `glob`,
-`@opentelemetry/exporter-prometheus`, `form-data` (>=4.0.6), `vite` (>=8.0.16).
-
-### Residual advisories (moderate only)
-
-`npm audit` reports **0 high/critical** (CI fails the build on HIGH+). A number of
-**moderate** advisories remain — these fluctuate as the npm advisory database is
-updated against existing dependency versions, and are predominantly **dev/build
-tooling and transitive** packages (e.g. `brace-expansion`, `postcss`, and various
-test/build transitives) that **do not ship in the deployed worker/gateway image or
-the published `dist/src` library**. They are tracked and cleared as upstream fixes
-land; CI intentionally does not block on moderates.
+`langsmith`, `axios`, `protobufjs` (>=8.6.6), `@grpc/grpc-js`, `ws`, `hono`
+(>=4.12.32), `fast-uri` (>=4.1.1), `fast-xml-parser`, `qs`, `uuid`, `ip-address`,
+`expr-eval`, `file-type`, `glob`, `brace-expansion` (>=5.0.8), `js-yaml`
+(>=4.3.0 <5), `postcss` (>=8.5.25), `@opentelemetry/exporter-prometheus`,
+`form-data` (>=4.0.6), `vite` (>=8.0.16).
+
+An override is a **security floor, not a version bump** — each one is the lowest
+patched release for the advisory, so the pinned tree stays semver-compatible with
+what the dependents declare. `js-yaml` is deliberately capped below `5` because
+`@langchain/classic` targets the 4.x API.
+
+### Residual advisories
+
+`npm audit` currently reports **0 vulnerabilities** (0 critical / 0 high /
+0 moderate / 0 low) for both the root package and `board/`. CI fails the build on
+HIGH+ and intentionally does not block on moderates, since moderate findings
+fluctuate as the npm advisory database is updated against existing dependency
+versions and are predominantly **dev/build tooling and transitive** packages that
+**do not ship in the deployed worker/gateway image or the published `dist/src`
+library**. Any that reappear are tracked and cleared as upstream fixes land.
+
+Note that the Trivy image scan reads `/app/package-lock.json` inside the runtime
+image, so it reports **dev-only** locked packages too even though the runner stage
+installs with `npm ci --omit=dev`. A dev-tooling HIGH therefore still fails the
+image gate, and the fix is to raise the floor in the lockfile rather than to
+exclude the finding.
 
 ## Sensitive-data handling (operator responsibility)
 

examples/blog-team/docker-compose.kafka.yml

@@ -131,6 +131,10 @@ services:
       OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}
       OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
+      # Opt out of KaibanJS anonymous telemetry (default: on). Set to 1 on networks
+      # that block nom.telemetrydeck.com at DNS level — the blocked fetch otherwise
+      # crashes the agent process (unhandled rejection inside kaibanjs).
+      KAIBAN_TELEMETRY_OPT_OUT: ${KAIBAN_TELEMETRY_OPT_OUT:-}
       SEMANTIC_FIREWALL_ENABLED: ${SEMANTIC_FIREWALL_ENABLED:-false}
       CIRCUIT_BREAKER_ENABLED: ${CIRCUIT_BREAKER_ENABLED:-false}
       JIT_TOKENS_ENABLED: ${JIT_TOKENS_ENABLED:-false}
@@ -167,6 +171,10 @@ services:
       OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}
       OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
+      # Opt out of KaibanJS anonymous telemetry (default: on). Set to 1 on networks
+      # that block nom.telemetrydeck.com at DNS level — the blocked fetch otherwise
+      # crashes the agent process (unhandled rejection inside kaibanjs).
+      KAIBAN_TELEMETRY_OPT_OUT: ${KAIBAN_TELEMETRY_OPT_OUT:-}
       SEMANTIC_FIREWALL_ENABLED: ${SEMANTIC_FIREWALL_ENABLED:-false}
       CIRCUIT_BREAKER_ENABLED: ${CIRCUIT_BREAKER_ENABLED:-false}
       JIT_TOKENS_ENABLED: ${JIT_TOKENS_ENABLED:-false}
@@ -202,6 +210,10 @@ services:
       OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}
       OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
+      # Opt out of KaibanJS anonymous telemetry (default: on). Set to 1 on networks
+      # that block nom.telemetrydeck.com at DNS level — the blocked fetch otherwise
+      # crashes the agent process (unhandled rejection inside kaibanjs).
+      KAIBAN_TELEMETRY_OPT_OUT: ${KAIBAN_TELEMETRY_OPT_OUT:-}
       SEMANTIC_FIREWALL_ENABLED: ${SEMANTIC_FIREWALL_ENABLED:-false}
       CIRCUIT_BREAKER_ENABLED: ${CIRCUIT_BREAKER_ENABLED:-false}
       JIT_TOKENS_ENABLED: ${JIT_TOKENS_ENABLED:-false}

examples/blog-team/docker-compose.yml

@@ -68,6 +68,10 @@ services:
       OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}
       OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
+      # Opt out of KaibanJS anonymous telemetry (default: on). Set to 1 on networks
+      # that block nom.telemetrydeck.com at DNS level — the blocked fetch otherwise
+      # crashes the agent process (unhandled rejection inside kaibanjs).
+      KAIBAN_TELEMETRY_OPT_OUT: ${KAIBAN_TELEMETRY_OPT_OUT:-}
       SEMANTIC_FIREWALL_ENABLED: ${SEMANTIC_FIREWALL_ENABLED:-false}
       CIRCUIT_BREAKER_ENABLED: ${CIRCUIT_BREAKER_ENABLED:-false}
       JIT_TOKENS_ENABLED: ${JIT_TOKENS_ENABLED:-false}
@@ -98,6 +102,10 @@ services:
       OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}
       OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
+      # Opt out of KaibanJS anonymous telemetry (default: on). Set to 1 on networks
+      # that block nom.telemetrydeck.com at DNS level — the blocked fetch otherwise
+      # crashes the agent process (unhandled rejection inside kaibanjs).
+      KAIBAN_TELEMETRY_OPT_OUT: ${KAIBAN_TELEMETRY_OPT_OUT:-}
       SEMANTIC_FIREWALL_ENABLED: ${SEMANTIC_FIREWALL_ENABLED:-false}
       CIRCUIT_BREAKER_ENABLED: ${CIRCUIT_BREAKER_ENABLED:-false}
       JIT_TOKENS_ENABLED: ${JIT_TOKENS_ENABLED:-false}
@@ -127,6 +135,10 @@ services:
       OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}
       OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
+      # Opt out of KaibanJS anonymous telemetry (default: on). Set to 1 on networks
+      # that block nom.telemetrydeck.com at DNS level — the blocked fetch otherwise
+      # crashes the agent process (unhandled rejection inside kaibanjs).
+      KAIBAN_TELEMETRY_OPT_OUT: ${KAIBAN_TELEMETRY_OPT_OUT:-}
       SEMANTIC_FIREWALL_ENABLED: ${SEMANTIC_FIREWALL_ENABLED:-false}
       CIRCUIT_BREAKER_ENABLED: ${CIRCUIT_BREAKER_ENABLED:-false}
       JIT_TOKENS_ENABLED: ${JIT_TOKENS_ENABLED:-false}

examples/global-research/docker-compose.yml

@@ -44,6 +44,10 @@ services:
       OPENAI_API_KEY: ${OPENAI_API_KEY:-}
       OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
+      # Opt out of KaibanJS anonymous telemetry (default: on). Set to 1 on networks
+      # that block nom.telemetrydeck.com at DNS level — the blocked fetch otherwise
+      # crashes the agent process (unhandled rejection inside kaibanjs).
+      KAIBAN_TELEMETRY_OPT_OUT: ${KAIBAN_TELEMETRY_OPT_OUT:-}
     restart: on-failure
     healthcheck:
       test: ['CMD', 'wget', '-qO-', 'http://localhost:3000/health']
@@ -70,6 +74,10 @@ services:
       OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}
       OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
+      # Opt out of KaibanJS anonymous telemetry (default: on). Set to 1 on networks
+      # that block nom.telemetrydeck.com at DNS level — the blocked fetch otherwise
+      # crashes the agent process (unhandled rejection inside kaibanjs).
+      KAIBAN_TELEMETRY_OPT_OUT: ${KAIBAN_TELEMETRY_OPT_OUT:-}
       CHAOS_MODE: ${CHAOS_MODE:-false}
       SEMANTIC_FIREWALL_ENABLED: ${SEMANTIC_FIREWALL_ENABLED:-false}
       CIRCUIT_BREAKER_ENABLED: ${CIRCUIT_BREAKER_ENABLED:-false}
@@ -101,6 +109,10 @@ services:
       OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}
       OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
+      # Opt out of KaibanJS anonymous telemetry (default: on). Set to 1 on networks
+      # that block nom.telemetrydeck.com at DNS level — the blocked fetch otherwise
+      # crashes the agent process (unhandled rejection inside kaibanjs).
+      KAIBAN_TELEMETRY_OPT_OUT: ${KAIBAN_TELEMETRY_OPT_OUT:-}
       SEMANTIC_FIREWALL_ENABLED: ${SEMANTIC_FIREWALL_ENABLED:-false}
       CIRCUIT_BREAKER_ENABLED: ${CIRCUIT_BREAKER_ENABLED:-false}
       JIT_TOKENS_ENABLED: ${JIT_TOKENS_ENABLED:-false}
@@ -130,6 +142,10 @@ services:
       OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}
       OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
+      # Opt out of KaibanJS anonymous telemetry (default: on). Set to 1 on networks
+      # that block nom.telemetrydeck.com at DNS level — the blocked fetch otherwise
+      # crashes the agent process (unhandled rejection inside kaibanjs).
+      KAIBAN_TELEMETRY_OPT_OUT: ${KAIBAN_TELEMETRY_OPT_OUT:-}
       SEMANTIC_FIREWALL_ENABLED: ${SEMANTIC_FIREWALL_ENABLED:-false}
       CIRCUIT_BREAKER_ENABLED: ${CIRCUIT_BREAKER_ENABLED:-false}
       JIT_TOKENS_ENABLED: ${JIT_TOKENS_ENABLED:-false}
@@ -159,6 +175,10 @@ services:
       OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}
       OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
       LLM_MODEL: ${LLM_MODEL:-gpt-4o-mini}
+      # Opt out of KaibanJS anonymous telemetry (default: on). Set to 1 on networks
+      # that block nom.telemetrydeck.com at DNS level — the blocked fetch otherwise
+      # crashes the agent process (unhandled rejection inside kaibanjs).
+      KAIBAN_TELEMETRY_OPT_OUT: ${KAIBAN_TELEMETRY_OPT_OUT:-}
       SEMANTIC_FIREWALL_ENABLED: ${SEMANTIC_FIREWALL_ENABLED:-false}
       CIRCUIT_BREAKER_ENABLED: ${CIRCUIT_BREAKER_ENABLED:-false}
       JIT_TOKENS_ENABLED: ${JIT_TOKENS_ENABLED:-false}

package-lock.json

@@ -76,18 +76,20 @@
     "@langchain/community": ">=0.3.59",
     "langchain": ">=0.3.37",
     "axios": ">=1.16.1",
-    "protobufjs": ">=7.5.8",
+    "protobufjs": ">=8.6.6",
     "@grpc/grpc-js": ">=1.14.4",
-    "fast-uri": ">=3.1.2",
+    "fast-uri": ">=4.1.1",
     "fast-xml-parser": ">=5.7.0",
-    "hono": ">=4.12.23",
+    "hono": ">=4.12.32",
+    "brace-expansion": ">=5.0.8",
+    "js-yaml": ">=4.3.0 <5",
     "ws": ">=8.21.0",
     "qs": ">=6.15.2",
     "uuid": ">=11.1.1",
     "ip-address": ">=10.2.0",
     "glob": ">=10.5.0",
     "@opentelemetry/exporter-prometheus": ">=0.217.0",
-    "postcss": ">=8.4.31",
+    "postcss": ">=8.5.25",
     "madge": {
       "typescript": "$typescript"
     }