Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

chainloop-dev/chainloop

              main @ fe0567f
            

Fixes

CVEs

HIGH

Peak severity

41.0%

Coverage

Highlights

Auth Bypass: 32 prior fixes. Scrutinize any change in this area.

app/controlplane/pkg/authz/authz.go: most-fixed (5 issues). Treat as high-risk during review.

27 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: New or mutated gRPC operations (such as membership deletions or new workflow contracts) frequently bypassed access controls due to missing mappings in the central server operations and policy maps. Strict registration of all endpoints in the gRPC middleware chain is required to prevent unauthorized actions.

Auth Bypass: API tokens are vulnerable to scope-creep and cross-tenant leakage. Historical issues allowed organization-level tokens to create non-project-scoped tokens, retrieve out-of-scope configurations, or bypass project bounds when searching and resolving token associations.

SQL Injection: Unvalidated inputs to database JSON filter queries allowed raw string payloads to reach the entgo.io execution layer, presenting a direct risk of SQL injection. Column identifiers and field paths must be strictly validated using regex allowlists.