4ef86abee7
security: GHSA-vc6p-m6vx-6cwq (HIGH) harden shellAfterCompleted execution
...
Route output and exitCode through OUTPUT/EXITCODE environment variables
instead of shell interpolation, and block shellAfterCompleted for webhook
actions.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 12:29:37 +01:00
1396184777
fix(executor): always anchor custom regex patterns and harden shellAfterCompleted
...
Wrap regex: patterns in a non-capturing group before applying ^...$ so
alternation cannot bypass full-string matching. Return template parse
errors from buildShellAfterCommand, and guard nil binding/action before
building shellAfterCompleted commands.
2026-07-08 10:46:13 +01:00
5fca2d9482
Merge branch 'next' into feat/better-prometheus-metrics
2026-06-28 23:17:28 +01:00
42003da384
fix: rerun args
2026-06-26 23:25:24 +01:00
d1787a3823
feat: Better prometheus support
2026-06-25 23:05:47 +01:00
03d188337e
fix: Parse templates in action ( #1035 )
2026-06-20 00:26:13 +01:00
7bd6e77ae2
chore: fix race conditions and little bugs
2026-06-19 09:56:41 +01:00
633d9ecd82
feat: action group sizing
2026-06-18 23:33:27 +01:00
de63793b3a
feat: circle indicator for running actions, justification support
2026-06-17 23:29:30 +01:00
f4b3c4289a
chore: Fix many little niggly bugs, test flakes, etc
2026-06-17 22:18:26 +01:00
6aa672e6c0
feat: Logs filtering, and log queue with group concurrency
2026-06-16 14:16:43 +01:00
ebffd9f040
security: GHSA-prj9-97mp-mwh2 (HIGH) Treat all ot_ system arguments as reserved, preventing RCE
...
Ensure OliveTin-owned arguments are injected only after filtering and validate system values before command execution.
2026-05-31 22:44:40 +01:00
2f77000de4
security: GHSA-364q-w7vh-vhpc (HIGH) Unsafe parsing of UniqueTrackingId can be used to write files
2026-03-08 23:29:00 +00:00
00cb5a2abf
fix: action triggers were broken #914
2026-03-04 23:12:20 +00:00
0c47564652
chore: logs are written with 0600 instead of 0644
2026-03-04 23:12:20 +00:00
4744169aa0
chore: code cleanup, remove todos, etc
2026-02-26 23:07:07 +00:00
38d6b57077
chore: codefmt
2026-02-25 23:24:02 +00:00
4bbd2eab15
security: GHSA-49gm-hh7w-wfvf
2026-02-22 10:19:08 +00:00
b777d599aa
fix: Massive cleanup of template parsing
2026-02-07 00:09:46 +00:00
54080efdf3
Fix move tpl to global ( #848 )
2026-01-26 11:33:36 +00:00
0e0bbd3fdb
fix: Nil binding on entity logs caused a NPE
2026-01-26 00:34:39 +00:00
b37f035ea6
fix: Move templating functionality to global, making it possible to replace templates across the config
2026-01-25 10:32:22 +00:00
e3c785319a
fix: Kill entire process group on timeout ( #605 )
2026-01-21 23:52:35 +00:00
a10088a040
chore: Fix duplicate code in executor when trying to reduce cyclo
2026-01-11 23:12:34 +00:00
b75d590343
Merge branch 'beta' into next
2026-01-11 23:09:49 +00:00
f173a0b725
chore: reduce gocyclo
2026-01-11 22:34:23 +00:00
242149f5a4
chore: reduce cyclo
2026-01-11 09:20:50 +00:00
832db4e135
chore: Log datetime parse failures from cal
2026-01-11 08:51:31 +00:00
a36e69b8f8
chore: calendar fixes
2026-01-11 01:50:27 +00:00
a4ff326625
chore: calendar logging fixes
2026-01-11 01:48:17 +00:00
84bd405ca9
chore: gocyclo fixes
2026-01-11 01:29:27 +00:00
6493f7bee7
feat: block notifications, and cleanup of action/binding IDs
2026-01-11 01:10:20 +00:00
be7c754043
feat: Rebuild authentication system to support 3k authentication
2025-11-26 22:33:19 +00:00
d1ec688c9a
chore: cleanup executor.go
2025-11-16 00:47:03 +00:00
5b57cf2480
fix: Logs were being displayed in the wrong order
2025-11-11 23:32:00 +00:00
de7129e1d7
chore: reduce cyclomatic complexity
2025-11-10 23:15:18 +00:00
e6a02ac614
chore: fix various cyclo checks
2025-10-30 15:25:57 +00:00
7abffedb14
Merge branch 'next' into fix-require-guests-login
2025-10-30 13:15:37 +00:00
a4e50bfb54
fix: panic when executing action with no arguments
2025-10-30 13:04:12 +00:00
c3d5da1981
chore: reduce cyclo complexity in service
2025-10-30 12:52:58 +00:00
57390be16f
feat: ActionDetailsView component, show timeout and logs for action. Fix output streaming.
2025-10-29 22:45:26 +00:00
2ea35697d0
fix : #672 Empty execution tracking ID in InternalLogEntry
2025-10-27 15:42:13 +00:00
c86bf629f9
bugfix: Added nil checks
2025-10-26 17:32:26 +00:00
c917d1b1e7
bugfix: #639 Exec support, disallow URL and similar arguments with
2025-10-26 16:40:44 +00:00
b330fbd1a5
fix: all broken integration tests
2025-10-11 00:45:41 +01:00
a464e6a445
fix: broken tests after changing the way arguments are parsed
2025-10-01 22:20:56 +01:00
a26a8bb032
chore: update the docs link for timeouts in the error message ( #651 )
2025-10-01 07:18:39 +01:00
570c0ba087
chore: Repair output streaming, lots of css/go lint
2025-09-06 08:42:13 +01:00
6b342cbedb
chore: Port huge amount of code to OliveTin 3k
2025-08-20 00:05:40 +01:00
a62d58f119
chore: OliveTin 3k progress
2025-08-03 22:10:51 +01:00
jamesread
Tim Green