New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Various codeql fixes. #865

Merged

joel-rieke merged 192 commits into main from develop

Dec 13, 2023

Collaborator

joel-rieke commented Dec 13, 2023

No description provided.

joel-rieke and others added 30 commits

November 2, 2023 17:10


          Making more util trcsub for common.

948671a


          Apply state changes.

8ed2020


          Checking in progress.

d9883a1


          Reverting some hardcodings.

e9d07c7


          Adding some robustness handling and changes to initial states.

5a6838c


          More state updates for windows side.

ca9a4cc


          Allow for definition of service.


          Adding Refresh syncMode (#775)

610c815

* Adding refresh

* Adding refresh logs


          Merge branch 'main' into develop

d325dbb


          Fix missing import.

89d6fc9


          Merge branch 'main' into develop

62d5da3


          Better support for server cert.

4ffa719


          Update to go 1.21.4

456bf30


          Merge branch 'main' into develop

db992e3


          More robust state handling.


          Merge branch 'main' into develop

8ad2736


          Prevent premature exits.

423f9e9


          Switch to ranging over channel.

b0bfecd


          Merge branch 'main' into develop

5f0c272


          Cleanup output for deployments.

136bc9f


          Add deployment for TrcDeploy

9ee1942


          Adding channel unblocker

069266b


          Adding back timer

1a2e189


          Add template for agent deploys.

06f29ef


          Update to latest hat.

3ac49ee


          Fixing go.mod

7f27ca0


          Merge branch 'main' into develop

7b32f04


          Merge branch 'releases/plugin/1.0.0' into develop

d888731


          Merge branch 'main' into develop

047801f


          Cleanup config and certify to handle errors more gracefully for bette…

…r interaction with trcsh.

Support multiple deployment configurations on a box.

joel-rieke added 3 commits

December 12, 2023 07:42


          Update to latest go-mysql-server build.

295c3a3


          Merge branch 'main' into develop

c321e54


          Adding bounds check.

a1231ff

joel-rieke requested a review from KarnveerSGill

December 13, 2023 15:20

github-advanced-security bot found potential problems

View reviewed changes

utils/diffUtil.go Fixed Show fixed Hide fixed


          Add actual bounds checking.

ffbbba0

github-advanced-security bot found potential problems

View reviewed changes

trcinitbase/init.go Fixed Show fixed Hide fixed

joel-rieke added 2 commits

December 13, 2023 07:52


          Bounds check totalKeyShard

aeb113c


          Disallow complex path navigation.

9112f37

github-advanced-security bot found potential problems

View reviewed changes

trcinit/initlib/vault-seed.go Fixed Show fixed Hide fixed

trcinit/initlib/vault-seed.go Fixed Show fixed Hide fixed

joel-rieke added 3 commits

December 13, 2023 08:07


          Add log sanitizing.

cc00799


          More sanitization.

aa4c697


          Directly applying recommendation from dependabot

cb92db8

KarnveerSGill approved these changes

View reviewed changes

joel-rieke merged commit 8067807 into main

6 checks passed

joel-rieke added a commit that referenced this pull request


          Prepare for release. (#867)

3d165fb

* Various codeql fixes. (#865)
* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot
---------

Signed-off-by: dependabot[bot] <support@github.com>

joel-rieke added a commit that referenced this pull request


          Main (#866)

4126b68

* Various codeql fixes. (#865)
* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot

---------

Signed-off-by: dependabot[bot] <support@github.com>

joel-rieke added a commit that referenced this pull request


          Various codeql fixes. (#865)

c96d0b8

* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot

---------

joel-rieke added a commit that referenced this pull request


          Prepare for release. (#867)

cf8c07a

* Various codeql fixes. (#865)
* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot
---------

Signed-off-by: dependabot[bot] <support@github.com>

joel-rieke added a commit that referenced this pull request


          Create new release. (#870)

f50d692

* Various codeql fixes. (#865)
* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot
---------

Signed-off-by: dependabot[bot] <support@github.com>

* Merging Develop into Main (#868)

* Merging Main to Plugin (#869)

* Adding addr to modifer cache key

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Karnveer Gill <101755160+KarnveerSGill@users.noreply.github.com>
Co-authored-by: Karnveer Gill <karnveer_gill@trimble.com>

joel-rieke added a commit that referenced this pull request


          Various codeql fixes. (#865)

* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot

---------

joel-rieke added a commit that referenced this pull request


          Prepare for release. (#867)

6a391c5

* Various codeql fixes. (#865)
* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot
---------

Signed-off-by: dependabot[bot] <support@github.com>

joel-rieke added a commit that referenced this pull request


          Create new release. (#870)

afcfb63

* Various codeql fixes. (#865)
* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot
---------

Signed-off-by: dependabot[bot] <support@github.com>

* Merging Develop into Main (#868)

* Merging Main to Plugin (#869)

* Adding addr to modifer cache key

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Karnveer Gill <101755160+KarnveerSGill@users.noreply.github.com>
Co-authored-by: Karnveer Gill <karnveer_gill@trimble.com>

joel-rieke added a commit that referenced this pull request


          Various codeql fixes. (#865)

6f16703

* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot

---------

joel-rieke added a commit that referenced this pull request


          Prepare for release. (#867)

e79d4de

* Various codeql fixes. (#865)
* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot
---------

Signed-off-by: dependabot[bot] <support@github.com>

joel-rieke added a commit that referenced this pull request


          Create new release. (#870)

aa09669

* Various codeql fixes. (#865)
* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot
---------

Signed-off-by: dependabot[bot] <support@github.com>

* Merging Develop into Main (#868)

* Merging Main to Plugin (#869)

* Adding addr to modifer cache key

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Karnveer Gill <101755160+KarnveerSGill@users.noreply.github.com>
Co-authored-by: Karnveer Gill <karnveer_gill@trimble.com>

joel-rieke added a commit that referenced this pull request


          Create new release. (#870)

a756953

* Various codeql fixes. (#865)
* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot
---------

Signed-off-by: dependabot[bot] <support@github.com>

* Merging Develop into Main (#868)

* Merging Main to Plugin (#869)

* Adding addr to modifer cache key

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Karnveer Gill <101755160+KarnveerSGill@users.noreply.github.com>
Co-authored-by: Karnveer Gill <karnveer_gill@trimble.com>

joel-rieke added a commit that referenced this pull request


          Various codeql fixes. (#865)

5d708c1

* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot

---------

joel-rieke added a commit that referenced this pull request


          Prepare for release. (#867)

e294142

* Various codeql fixes. (#865)
* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot
---------

Signed-off-by: dependabot[bot] <support@github.com>

joel-rieke added a commit that referenced this pull request


          Create new release. (#870)

75b6337

* Various codeql fixes. (#865)
* Adding bounds check.
* Add actual bounds checking.
* Bounds check totalKeyShard
* Disallow complex path navigation.
* Add log sanitizing.
* More sanitization.
* Directly applying recommendation from dependabot
---------

Signed-off-by: dependabot[bot] <support@github.com>

* Merging Develop into Main (#868)

* Merging Main to Plugin (#869)

* Adding addr to modifer cache key

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Karnveer Gill <101755160+KarnveerSGill@users.noreply.github.com>
Co-authored-by: Karnveer Gill <karnveer_gill@trimble.com>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment