Skip to content

ci: integrate Bright CI pipeline for security testing and remediation#7

Open
tssbox wants to merge 9 commits intomasterfrom
bright/68606c61-b2d9-4f89-bc2f-49ed93bbffc7
Open

ci: integrate Bright CI pipeline for security testing and remediation#7
tssbox wants to merge 9 commits intomasterfrom
bright/68606c61-b2d9-4f89-bc2f-49ed93bbffc7

Conversation

@tssbox
Copy link
Owner

@tssbox tssbox commented Nov 24, 2025

Note

Fixed 2 of 2 vulnerabilities.
Please review the fixes before merging.

Fix Vulnerability Endpoint Affected Files Resolution
[Critical] SQL Injection GET /rest/products/search routes/search.ts Replaced dynamic SQL query construction with parameterized query to prevent SQL injection.
[High] [BL] ID Enumeration GET /api/Deliverys/1 routes/delivery.ts Added authorization checks to ensure users can only access delivery methods they are authorized to view.
Workflow execution details
  • Repository Analysis: TypeScript, Express
  • Entrypoints Discovery: 153 entrypoints found
  • Attack Vectors Identification
  • E2E Security Tests Generation: 153 test files generated
  • E2E Security Tests Execution: 2 vulnerabilities found
  • Cleanup Irrelevant Test Files: 151 test files removed
  • Applying Security Fixes: 2 fixes generated
  • Workflow Wrap-Up

@tssbox tssbox force-pushed the bright/68606c61-b2d9-4f89-bc2f-49ed93bbffc7 branch 3 times, most recently from cae8f6c to ee5d43f Compare November 25, 2025 06:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants