Skip to content

Fix filesystem race and secure audit test files - #23

Merged
Praket7 merged 1 commit into
mainfrom
fix/codeql-security-alerts
Sep 25, 2026
Merged

Praket7 merged 1 commit into
mainfrom
fix/codeql-security-alerts

Conversation

@Praket7

@Praket7 Praket7 commented Sep 25, 2026

Copy link
Copy Markdown
Owner

Security fixes

  • Validate and read configured tool libraries through the same open file descriptor, avoiding path replacement between metadata checks and reads.
  • Create audit test files under a unique private temporary directory and remove it after the test file completes.

Validation

  • 149 TypeScript tests pass.
  • Lint and typecheck pass.
  • GitHub Actions and CodeQL will validate the pushed branch.

@Praket7
Praket7 merged commit 0669bf7 into main Sep 25, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant