Skip to content

ci(security): integrate Bright CI pipeline for security tests and remediation#892

Open
tssbox wants to merge 19 commits intofixer/fix_workflow_tc06from
bright/73a7f0d8-b0c5-41cc-a92d-c20696fbd2bd
Open

ci(security): integrate Bright CI pipeline for security tests and remediation#892
tssbox wants to merge 19 commits intofixer/fix_workflow_tc06from
bright/73a7f0d8-b0c5-41cc-a92d-c20696fbd2bd

Conversation

@tssbox
Copy link
Contributor

@tssbox tssbox commented Feb 13, 2026

Note

Fixed 2 of 2 vulnerabilities.
Please review the fixes before merging.

Fix Vulnerability Endpoint Affected Files Resolution
[Critical] XPATH Injection GET /api/partners/searchPartners src/partners/partners.service.ts Sanitize user input for XPath queries to prevent injection attacks by removing potentially dangerous characters.
[Critical] XPATH Injection GET /api/partners/partnerLogin src/partners/partners.controller.ts, src/partners/partners.service.ts Implemented escaping of XPath values to prevent injection by replacing single quotes with double single quotes.
Workflow execution details
  • Repository Analysis: TypeScript, NestJS
  • Entrypoints Discovery: 3 entrypoints found
  • Attack Vectors Identification
  • E2E Security Tests Generation
  • E2E Security Tests Execution: 2 vulnerabilities found
  • Cleanup Irrelevant Test Files: 1 test files removed
  • Applying Security Fixes: 2 fixes applied
  • E2E Security Tests Execution: 1 vulnerabilities found
  • Cleanup Irrelevant Test Files: 1 test files removed
  • Applying Security Fixes: 1 fixes applied
  • E2E Security Tests Execution: 1 vulnerabilities found
  • Cleanup Irrelevant Test Files: 0 test files removed
  • Applying Security Fixes: 1 fixes applied
  • E2E Security Tests Execution: 0 vulnerabilities found
  • ⏭️ Cleanup Irrelevant Test Files: Skipped
  • ⏭️ Applying Security Fixes: Skipped
  • Workflow Wrap-Up

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

Comments