Skip to content

Pull requests: sthenos-security/reach-testbed-github-go

Pull request creation is restricted
34 Open 4 Closed
34 Open 4 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Reachable remediation proof
#39 opened Jul 9, 2026 by github-actions Bot Loading…
Reachable remediation proof
#38 opened Jul 9, 2026 by github-actions Bot Loading…
Reachable remediation proof
#37 opened Jul 9, 2026 by github-actions Bot Loading…
Remediate hardcoded GitHub PAT in internal/handlers/secrets.go via runtime secret loading reachable-copilot-verification-failed REACHABLE could not verify this Copilot PR
#36 opened Jul 9, 2026 by Copilot AI • Draft
@al1dazzi
Harden handler URL fetching and error responses for Reachable shard 4 (CWE-319/918 + error disclosure)
#35 opened Jul 9, 2026 by Copilot AI • Draft
@al1dazzi
fix(security): remediate OS command injection in DiagnosticPing (CWE-78)
#34 opened Jul 9, 2026 by Copilot AI • Draft
@al1dazzi
fix: redact PII from logs/HTTP and isolate user input from LLM instructions
#33 opened Jul 9, 2026 by Copilot AI • Draft
@al1dazzi
fix: upgrade golang.org/x/text v0.3.7 → v0.3.8 (CVE-2022-32149)
#32 opened Jul 9, 2026 by Copilot AI • Draft
@al1dazzi
Remove hardcoded GitHub PAT from secret handler
#31 opened Jun 23, 2026 by Copilot AI • Draft
@al1dazzi
Fix SSRF, CWE-319, error-leak, and taint-flow in FetchTool handler
#30 opened Jun 23, 2026 by Copilot AI • Draft
@al1dazzi
fix(security): remediate OS command injection in DiagnosticPing
#29 opened Jun 23, 2026 by Copilot AI • Draft
@al1dazzi
Harden AI prompt handling and redact DLP telemetry in targeted handlers
#28 opened Jun 23, 2026 by Copilot AI • Draft
@al1dazzi
Upgrade golang.org/x/text v0.3.7 → v0.3.8 to fix CVE-2022-32149
#27 opened Jun 23, 2026 by Copilot AI • Draft
@al1dazzi
fix(secrets): remove hardcoded GitHub PAT, read token from env at runtime
#26 opened Jun 22, 2026 by Copilot AI • Draft
@al1dazzi
fix: isolate LLM user input and redact PII from logs/HTTP payloads
#25 opened Jun 22, 2026 by Copilot AI • Draft
@al1dazzi
fix: upgrade golang.org/x/text v0.3.7 → v0.3.8 (CVE-2022-32149)
#24 opened Jun 22, 2026 by Copilot AI • Draft
@al1dazzi
security: fix SSRF, cleartext fetch, error disclosure, and tainted URL flow in handlers
#23 opened Jun 22, 2026 by Copilot AI • Draft
@al1dazzi
Fix OS command injection in DiagnosticPing (RCH-RULE-877450ee, RCH-RULE-a755ac83, RCH-RULE-7059753c)
#22 opened Jun 22, 2026 by Copilot AI • Draft
@al1dazzi
fix: remediate 13 reachable security findings (cmdi, SSRF, LLM PII, DLP, secret, error-leak, CVE)
#21 opened Jun 22, 2026 by Copilot AI • Draft
@al1dazzi
Remediate reachable critical batch: command injection, SSRF/TLS, secret exposure, PII leakage, and x/text CVE
#20 opened Jun 22, 2026 by Copilot AI • Draft
@al1dazzi
fix: remediate 13 reachable security findings (cmdi, SSRF, PII, secret, error-leak, vuln-dep)
#19 opened Jun 22, 2026 by Copilot AI • Draft
@al1dazzi
Reachable remediation proof
#18 opened Jun 21, 2026 by github-actions Bot Loading…
Reachable remediation proof
#17 opened Jun 21, 2026 by github-actions Bot Loading…
fix(dlp): remove PII from logs and outbound analytics in SupportExport
#16 opened Jun 21, 2026 by Copilot AI • Draft
@al1dazzi
fix(dlp): mask SSN in logs and strip PII from outbound analytics payload
#15 opened Jun 21, 2026 by Copilot AI • Draft
@al1dazzi
ProTip! Type g i on any issue or pull request to go back to the issue listing page.