Skip to content

OIDC Support#1746

Open
pranav-super wants to merge 38 commits into
developfrom
feature/oidc-support
Open

OIDC Support#1746
pranav-super wants to merge 38 commits into
developfrom
feature/oidc-support

test(oidc): warm up dev server before OIDC suite to de-flake first login

ff50761
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Jul 6, 2026 in 3s

1 configuration not found

Warning: Code scanning may not have found all the alerts introduced by this pull request, because 1 configuration present on refs/heads/develop was not found:

Actions workflow (security-scan.yml)

  • ❓  .github/workflows/security-scan.yml:analyze/language:javascript

New alerts in code changed by this pull request

Security Alerts:

  • 2 critical

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 149 in .github/workflows/test.yml

See this annotation in the file changed.

Code scanning / CodeQL

Environment variable built from user-controlled sources Critical test

Potential environment variable injection in
echo "AERIE_IMAGE_TAG=pr-$(echo "$PR_BODY" | sed -n 's/.*___REQUIRES_AERIE_PR___=\"\([0-9]\+\)\".*/\1/p')" >> "$GITHUB_ENV"
Loading
, which may be controlled by an external user (
workflow_dispatch
Loading
).
Potential environment variable injection in
echo "AERIE_IMAGE_TAG=pr-$(echo "$PR_BODY" | sed -n 's/.*___REQUIRES_AERIE_PR___=\"\([0-9]\+\)\".*/\1/p')" >> "$GITHUB_ENV"
Loading
, which may be controlled by an external user (
workflow_dispatch
Loading
).

Check failure on line 153 in .github/workflows/test.yml

See this annotation in the file changed.

Code scanning / CodeQL

Environment variable built from user-controlled sources Critical test

Potential environment variable injection in
echo "GATEWAY_IMAGE_TAG=pr-$(echo "$PR_BODY" | sed -n 's/.*___REQUIRES_GATEWAY_PR___=\"\([0-9]\+\)\".*/\1/p')" >> "$GITHUB_ENV"
Loading
, which may be controlled by an external user (
workflow_dispatch
Loading
).
Potential environment variable injection in
echo "GATEWAY_IMAGE_TAG=pr-$(echo "$PR_BODY" | sed -n 's/.*___REQUIRES_GATEWAY_PR___=\"\([0-9]\+\)\".*/\1/p')" >> "$GITHUB_ENV"
Loading
, which may be controlled by an external user (
workflow_dispatch
Loading
).