Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ryancodrai/turbovec

              main @ ccab9f3
            

Fixes

CVEs

HIGH

Peak severity

28.6%

Coverage

Highlights

Path Traversal: 2 prior fixes. Scrutinize any change in this area.

.github/workflows/claude.yml: most-fixed (3 issues). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Privilege Escalation / Auth Bypass: The owner-only guard used a mutable username check (github.actor) that could be spoofed, granting arbitrary code execution via the @claude workflow. The fix pins to immutable actor_id, but this pattern should be audited across all workflow guards.

Path Traversal: Two separate fixes were needed for path traversal in namespace handling: one for ':' (Windows drive-relative) and one for path separators/'..'/'.' in from_persist_dir. This indicates incomplete validation on first pass, and the same namespace validation must be enforced on all file-loading entry points.

Credential Exposure: actions/checkout persisted credentials by default, leaking them to untrusted code. Disabling persist-credentials is essential for any checkout in agent-driven workflows.