fix(security): supabase rpc path validation, ssh stream byte cap, storage quota coverage by waleedlatif1 · Pull Request #4605 · simstudioai/sim

fix(security): supabase rpc path validation, ssh stream byte cap, storage quota coverage

waleedlatif1

committed

fix(security): scope execution log writes to owning workflow; add env-var workspace membership guard

waleedlatif1

committed

fix(security): remove fileSize > 0 quota bypass gate; exempt logs context from quota

waleedlatif1

committed

chore: remove extraneous inline comments

waleedlatif1

committed

fix(security): scope markExecutionAsFailed UPDATE by workflowId; thread workflowId through HITL callers

waleedlatif1

committed

fix(security): add personal credential ownership check in sharepoint site route; scope markExecutionAsFailed by workflowId

waleedlatif1

committed

fix: remove logs from user-accessible upload contexts; restore distinct biome .next glob

waleedlatif1

committed

fix(sharepoint): migrate site route to authorizeCredentialUse

waleedlatif1

committed

fix(logging): make workflowId required in markExecutionAsFailed

waleedlatif1

committed

test(security): add tests for cross-tenant log guard, quota bypass fix, and workflowId scoping

waleedlatif1

committed

fix(lint): move IconComponent outside ToolInput to fix noNestedComponentDefinitions

waleedlatif1

committed

fix(logging): scope completeWithCancellation and completeWithPause reads by workflowId

waleedlatif1

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(security): supabase rpc path validation, ssh stream byte cap, storage quota coverage#4605

fix(security): supabase rpc path validation, ssh stream byte cap, storage quota coverage#4605
waleedlatif1 merged 12 commits into
stagingfrom
fix/sec2

Commits on May 14, 2026

fix(security): supabase rpc path validation, ssh stream byte cap, storage quota coverage

fix(security): scope execution log writes to owning workflow; add env-var workspace membership guard

fix(security): remove fileSize > 0 quota bypass gate; exempt logs context from quota

chore: remove extraneous inline comments

fix(security): scope markExecutionAsFailed UPDATE by workflowId; thread workflowId through HITL callers

fix(security): add personal credential ownership check in sharepoint site route; scope markExecutionAsFailed by workflowId

fix: remove logs from user-accessible upload contexts; restore distinct biome .next glob

fix(sharepoint): migrate site route to authorizeCredentialUse

fix(logging): make workflowId required in markExecutionAsFailed

test(security): add tests for cross-tenant log guard, quota bypass fix, and workflowId scoping

fix(lint): move IconComponent outside ToolInput to fix noNestedComponentDefinitions

fix(logging): scope completeWithCancellation and completeWithPause reads by workflowId