Skip to content
Security CI/CD

fix(security): validate X-User-Id against trusted owner whitelist to prevent BOLA #34

Sign in to view logs

fix(security): validate X-User-Id against trusted owner whitelist to prevent BOLA

fix(security): validate X-User-Id against trusted owner whitelist to prevent BOLA #34

Triggered via pull request July 22, 2026 07:50
@namann5namann5
synchronize #2023
namann5:fix/bola-x-user-id-header-auth-bypass
Status Success
Total duration 26s
Artifacts 2

security-ci.yml

on: pull_request
Python Security Linting (Bandit)
12s
Python Security Linting (Bandit)
Route Authentication Check
7s
Route Authentication Check
Debug Mode Default Check
8s
Debug Mode Default Check
Hardcoded Secret Detection
9s
Hardcoded Secret Detection
Environment Config Validation
7s
Environment Config Validation
Dependency Security Audit
22s
Dependency Security Audit
Fit to window
Zoom out
Zoom in

Annotations

6 warnings
Route Authentication Check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Environment Config Validation
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Debug Mode Default Check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hardcoded Secret Detection
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Python Security Linting (Bandit)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dependency Security Audit
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
bandit-report
2.52 KB
sha256:55867be8b902ad1f0df5f7cd2e3910e3c73cf76904afe4c936bdf5d3a15ccd41
dep-audit-report
854 Bytes
sha256:4d7cd47d0255a83979684c728206b639278e068f02d6b589814779325102098b