kubestellar/console-kb

[sec-check] 12 open Scorecard security alerts — TokenPermissions (10) + BranchProtection + SAST about 1 hour ago

help wanted security

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Over-privileged job-level permissions in cncf-mission-gen.yml — collect and auto-merge jobs about 1 hour ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[ci-maintainer] scan-missions fails on master: CNCF mission content blocked by safety scanner about 4 hours ago

help wanted ci

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[ci-maintainer] platform-install-gen fails: command injection blocked + git push 403 about 4 hours ago

help wanted ci

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] reusable workflow refs unpinned @main in 6 workflows (supply-chain risk) 1 day ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] disabled workflow files retain pre-fix pwn-request patterns — delete or update 1 day ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] copilot-dco.yml: no top-level permissions + @main reusable ref 2 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] greetings.yml: top-level issues/pull-requests write not minimized 2 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Token-Permissions: ai-fix.yml and copilot-automation.yml use top-level write permissions with pull_request_target 2 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] copilot-automation.yml + ai-fix.yml: pull_request_target with top-level write permissions, no fork guards 2 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] pr-verifier.yml calls non-existent reusable-pr-verifier.yml — PR title check disabled 2 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] greetings.yml pull_request_target missing fork guard — pwn-request risk 2 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] ai-fix.yml and copilot-automation.yml reference kubestellar/infra reusable workflows at @main — supply chain hardening 4 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] scanner.mjs: string-match only — base64/obfuscated malicious commands bypass detection 5 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Scorecard Code-Review score 0/10 — unreviewed commits merged 5 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] No branch protection on default branch 5 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] No branch protection on default branch (Scorecard BranchProtectionID high) 5 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Code-Review score 0 — 0/15 recent changesets had an approved review (Scorecard high) 5 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Token-Permissions: 17 Scorecard alerts for over-permissive GITHUB_TOKEN in workflows 6 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] PinnedDependenciesID: cncf-install-gen.yml pipes curl response to node -e (Scorecard alert #41) 6 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] PinnedDependenciesID: downloadThenRun not pinned by hash in cncf-install-gen.yml:361 (Scorecard medium) 6 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Token-Permissions: 16 job-level write scopes in 8 workflows (Scorecard high) 6 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] env binary in ALLOWED_BASE_COMMANDS allows full shell-interpreter escape (CWE-78) 7 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Overly broad top-level workflow token permissions in pr-verifier.yml and scorecard.yml 7 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] residual command-line injection taint in mission-executor.mjs — binary resolved from user input (CodeQL #138) 7 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Over-permissive GITHUB_TOKEN in console-kb workflows (17 Scorecard alerts) 7 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] incomplete HTML sanitization allows script re-injection in stackoverflow.mjs and llm-synthesizer.mjs 7 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] command-line injection via LLM-provided input in mission-executor.mjs 7 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] console-kb: over-permissive GITHUB_TOKEN in 4 new workflows — build-index, cncf-install-gen, cncf-mission-gen, platform-install-gen (Scorecard #119–#129) 8 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] console-kb: command-line injection regression in mission-executor.mjs — kubectl exec argument bypass (CodeQL #115, persistent) 8 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] console-kb: HTML comment filter bypass via --!> end tag in llm-synthesizer.mjs cleanInput() (CodeQL #131) 8 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] console-kb: incomplete HTML sanitization in stackoverflow.mjs stripHtml() — entity-decode enables script injection (CodeQL #130) 8 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Command-line injection in mission-executor.mjs — LLM-controlled commands bypass shell allowlist 8 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] XSS via HTML entity decoding after tag stripping in stackoverflow.mjs stripHtml() 8 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Incomplete HTML comment sanitization in llm-synthesizer.mjs cleanInput() allows <!-- injection 8 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] console-kb: double-unescaping HTML entities in stackoverflow.mjs — & decoded before other entities 8 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] console-kb: incomplete markdown sanitization in scanner.mjs — backslash not escaped before pipe/backtick 8 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] console-kb: incomplete URL substring sanitization in text-utils.mjs — isGarbageSnippet() bypassable 8 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] console-kb: incomplete multi-character sanitization in text-utils.mjs — HTML comment injection bypass 8 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Missing permissions block in copilot-dco.yml (not propagated from console fix) 9 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] pr-verifier.yml: pull_request_target + secrets: inherit exposes all repo secrets 9 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] ai-fix.yml: pull_request_target with 3 write permissions and no fork guard (2nd filing — fix not applied) 9 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] greetings.yml: pull_request_target + secrets: inherit exposes all repo secrets (2nd filing — fix not applied) 9 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[ci-maintainer] PR Verifier startup_failure: console-kb still uses unpinned @main ref (regression) 13 days ago

help wanted ci

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] 11 workflows use kubestellar/infra reusable workflows at @main (mutable ref) 14 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] copilot-automation.yml: pull_request_target with write permissions and no fork guard 14 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] ai-fix.yml: pull_request_target with write permissions and no fork guard 14 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] HIGH: Branch protection not configured on master branch (Scorecard score 0/10) 21 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Dependabot security updates disabled 21 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] HIGH: No dependency update tool configured — Dependabot/Renovate absent (Scorecard #5, score 0/10) 22 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] MEDIUM: Pinned-Dependencies score 6/10 — npm commands not pinned by hash in 5 workflows (Scorecard #39,#41,#77,#78,#89,#90,#96,#98,#99) 22 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] HIGH: Code-Review score 2/10 — only 4 of 18 recent changesets reviewed (Scorecard #58) 22 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] HIGH: Token-Permissions score 0/10 in 11 workflows — broad top-level write permissions (Scorecard alerts #46-#100) 22 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[quality] SC2086 shellcheck violations in scan-missions.yml and validate-schema.yml 22 days ago

help wanted quality testing

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[quality] Add actionlint CI workflow to validate GitHub Actions YAML 22 days ago

help wanted quality testing

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] HIGH: Over-permissive GITHUB_TOKEN in 11 workflows — no top-level permissions declared (Scorecard #46-100) 22 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Over-permissive GITHUB_TOKEN in 15 workflows + 4 OSV CVEs via Scorecard 22 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[scanner] scripts/package-lock.json: yaml@2.9.0 integrity mismatch breaks Validate Mission Schema CI 23 days ago

bug help wanted

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[architect] generate-cncf-missions.mjs is a 91KB/2036-line god-script — extract shared utilities into lib/ 23 days ago

help wanted architecture tech-debt

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[guide] console-kb missing CODE_OF_CONDUCT.md 23 days ago

documentation help wanted

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[guide] Add SECURITY.md for vulnerability reporting 23 days ago

documentation help wanted

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] vite path traversal in .map handler allows reading files outside project root (GHSA-4w7w-66w2-5vf9 / CVE-2026-39365) 24 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] vite path traversal in dev server .map handling via vitest transitive dep (GHSA-4w7w-66w2-5vf9 / CVE-2026-39365) 24 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Expression injection via PR filenames in validate-schema.yml and kb-quality-enforcement.yml 24 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Python code injection via PR filename in mission-safety-scan.yml open() heredoc 24 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] console-kb workflows: pull_request_target + write permissions + floating @main reusable refs (missing fork guards) 24 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Expression injection in scan-missions.yml via steps.changed.outputs.files 24 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] @vitest/browser GHSA-2h32-95rg-cppp (CVE-2026-47428): XSS→RCE via otelCarrier query param (CVSS 9.6) 25 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Broken security gate in platform-install-gen.yml: scanner API mismatch allows malicious LLM content to be committed 25 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] CI workflow command injection: Helm repo URL → curl shell expansion + Python code injection via filenames 25 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Expression injection + shell injection in cncf-install-gen.yml and mission-executor.mjs 25 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Secret scanning disabled — no automated detection for leaked credentials 25 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] LOW: Code-Review not enforced + no Dependency-Update-Tool configured (Scorecard HIGH) 25 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] MEDIUM: Vite path traversal CVE-2026-39365 (GHSA-4w7w-66w2-5vf9) in transitive deps 25 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] LOW: Branch protection not enforced on master branch (Scorecard HIGH) 25 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[scanner] CI workflows skip YAML missions in content validation and safety scan 25 days ago

bug help wanted

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] CRITICAL: vitest@^2.0.0 RCE + yaml/esbuild/postcss CVEs in scripts/package.json 25 days ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[ci-maintainer] Scan Mission Files fails on weekly scheduled run — scan-pr.mjs exits 1 25 days ago

help wanted kind/bug

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[guide] fixes/troubleshoot/ and fixes/troubleshooting/ both exist — split naming confuses contributors 29 days ago

documentation help wanted

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[guide] README missing fixes/ directory category descriptions for contributors 30 days ago

documentation help wanted

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[guide] README missing runbooks documentation — 10 operational runbooks exist but are undiscoverable about 1 month ago

documentation help wanted

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[guide] CONTRIBUTING.md missing documentation for local validation scripts (validate-schema, tests) about 1 month ago

documentation help wanted

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[guide] CONTRIBUTING.md is a generic KubeStellar template and does not cover the fixer submission workflow about 1 month ago

documentation help wanted

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[guide] No fixer YAML schema or format specification for knowledge base contributors about 1 month ago

documentation help wanted

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

[sec-check] Supply chain risk: unpinned @main reusable workflow refs with pull_request_target + secrets:inherit about 1 month ago

help wanted security

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

New install mission: urunc (CNCF Sandbox, 205 stars) 2 months ago

help wanted kind/feature

kubestellar/console-kb

9

Community knowledge base for KubeStellar Console AI missions — share, discover, and import proven solutions to save tokens and time

JavaScript

Open Issues Need Help