Jean Prat

Permit to have prometheus db dir under /home

1

fixes #334

**What happened?** Using prometheus_db_dir: /home/foo prometheus cannot start with this error: ``` level=error ts=2021-02-23T09:29:09.099Z caller=query_logger.go:87 component=activeQueryTracker msg="Error opening query log file" file=/home/foo/queries.active err="open /home/foo/queries.active: permission denied" ``` **Did you expect...

Open redirect in oauth path

4

The state is used in order to redirect user after authentication. It is composed of crsf_cookie:redirect_url. redirect_url is not validated and could lead to an open redirect ([CWE-601: URL Redirection...

fix: Postgresql availability type shouldn't prevent backup configuration

2

The old behaviour is still preserved but we are now able to configure some backup options. fixes #351

### TL;DR If I have an availability type REGIONAL, I should be able to disable point in time recovery and backups. ### Expected behavior * Backups disabled * Point int...

Syntax error on COPY--chown in dockerfile

1

**Describe the bug** When I use COPY--chown in a dockerfile, I have a syntax error in semgrep. **To Reproduce** ``` bash-5.2$ cat

[Feature] Graceful shutdown

7

### Description I'm using graph-node in kubernetes with a sql proxy to connect to postgresql. When I do a replace of the graph-node, kubernetes sends a SIGTERM and will wait...

Provider api calls with parameters and result appears in logs

19

I have logs of the calls to google apis and the result. These logs contains access tokens, I don't want them appear. These are multiline and it's just generating noise...

content of /proc/sys/kernel/random/uuid is always the same

1

The file [/proc/sys/kernel/random/uuid](https://www.kernel.org/doc/html/latest/admin-guide/sysctl/kernel.html#random) should respond a new uuid each time we read it. Some applications uses this file to generate uuid and we have collisions because it responds always the...

fix(replicator): respect fnames_username_unique constraint

3

## Motivation When a fname is transfered, the fnames_username_unique prevents using delete_at but requires a deletion of the data. ## Change Summary Since hubble forgets about the old fname attachement,...