Skip to content

Member 2: Repair CI workflows and IDOR regression test - #469

Open
Uinduwara wants to merge 48 commits into
OWASP:masterfrom
Thakshila05:member2/workflow-repair
Open

Uinduwara wants to merge 48 commits into
OWASP:masterfrom
Thakshila05:member2/workflow-repair

Conversation

@Uinduwara

Copy link
Copy Markdown

Member 2 - Workflow Repair

This PR updates and repairs the CI workflows after the Member 2 IDOR remediation.

Changes

  • Fixed legacy Cypress E2E workflow compatibility
  • Added required Cypress system dependency
  • Updated allocation E2E test for the IDOR security fix
  • Kept dependency audit findings as report-only for the intentionally vulnerable NodeGoat application
  • Integrated the latest master changes
  • Preserved the IDOR mitigation using the authenticated session user ID

Verification

  • Lint: Passed
  • E2E Test: Passed
  • DevSecOps Pipeline: Passed

ThakshilaUddeepana and others added 30 commits September 23, 2026 09:07
Add local Docker setup documentation and architecture
Prevent server-side JavaScript injection in contributions

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants