Skip to content

Fix-Helm-UTF8-env#15211

Open
samiat4911 wants to merge 4 commits into
DefectDojo:devfrom
samiat4911:fix/helm-utf8-env
Open

Fix-Helm-UTF8-env#15211
samiat4911 wants to merge 4 commits into
DefectDojo:devfrom
samiat4911:fix/helm-utf8-env

Conversation

@samiat4911

@samiat4911 samiat4911 commented Jul 10, 2026

Copy link
Copy Markdown
Contributor

Description

Closes #14979.

This PR fixes Helm deployments where non-ASCII values in environment-backed Django settings can fail at runtime because the container locale is not explicitly UTF-8.

The Helm ConfigMap now defines UTF-8 defaults for Python and the process locale:

  PYTHONUTF8: {{ ternary (index .Values.extraConfigs "PYTHONUTF8") "1" (hasKey .Values.extraConfigs "PYTHONUTF8") | quote }}
  LANG: {{ ternary (index .Values.extraConfigs "LANG") "C.UTF-8" (hasKey .Values.extraConfigs "LANG") | quote }}
  LC_ALL: {{ ternary (index .Values.extraConfigs "LC_ALL") "C.UTF-8" (hasKey .Values.extraConfigs "LC_ALL") | quote }}

The existing extraConfigs rendering was also adjusted so users can still override those values without rendering duplicate ConfigMap keys:

{{- with omit .Values.extraConfigs "PYTHONUTF8" "LANG" "LC_ALL" }}
  {{- toYaml . | nindent 2 }}
{{- end }}

Test results

Validated the Helm chart with a local Helm 3.16.4 binary:

C:\tmp\helm-3164\windows-amd64\helm.exe template defectdojo .tmp\dd-helm-validate-utf8 --show-only templates/configmap.yaml
C:\tmp\helm-3164\windows-amd64\helm.exe template defectdojo .tmp\dd-helm-validate-utf8 --show-only templates/configmap.yaml --set extraConfigs.PYTHONUTF8=0 --set extraConfigs.LANG=en_US.UTF-8 --set extraConfigs.LC_ALL=en_US.UTF-8
C:\tmp\helm-3164\windows-amd64\helm.exe lint .tmp\dd-helm-validate-utf8
git diff --check

The default render includes:

  PYTHONUTF8: "1"
  LANG: "C.UTF-8"
  LC_ALL: "C.UTF-8"

The override render preserves explicit user-provided values:

  PYTHONUTF8: "0"
  LANG: "en_US.UTF-8"
  LC_ALL: "en_US.UTF-8"

Documentation

Please update any documentation when needed in the documentation folder)

Checklist

This checklist is for your information.

  • Make sure to rebase your PR against the very latest dev.
  • Features/Changes should be submitted against the dev.
  • Bugfixes should be submitted against the bugfix branch.
  • Give a meaningful name to your PR, as it may end up being used in the release notes.
  • Your code is Ruff compliant (see ruff.toml).
  • Your code is python 3.13 compliant.
  • If this is a new feature and not a bug fix, you've included the proper documentation in the docs at https://github.com/DefectDojo/django-DefectDojo/tree/dev/docs as part of this PR.
  • Model changes must include the necessary migrations in the dojo/db_migrations folder.
  • Add applicable tests to the unit tests.
  • Add the proper label to categorize your PR.

@github-actions

Copy link
Copy Markdown
Contributor

This pull request has conflicts, please resolve those before we can evaluate the pull request.

@github-actions

Copy link
Copy Markdown
Contributor

Conflicts have been resolved. A maintainer will review the pull request shortly.

@github-actions

Copy link
Copy Markdown
Contributor

This pull request has conflicts, please resolve those before we can evaluate the pull request.

@dryrunsecurity

dryrunsecurity Bot commented Jul 20, 2026

Copy link
Copy Markdown

DryRun Security

This pull request introduces critical security concerns as the author 'samiat4911', who is not in the allowed authors list, modified over 40 sensitive files across core codepaths including API serializers, models, migrations, authorization logic, and templates, potentially compromising system integrity and access controls. Although none of these findings are blocking, the widespread modification of high-risk components demands immediate review and remediation.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/api_v2/serializers.py (drs_360c505c)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/api_v2/serializers.py' matches configured sensitive codepath pattern 'dojo/api_v2/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/api_v2/views.py (drs_dcf3869b)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/api_v2/views.py' matches configured sensitive codepath pattern 'dojo/api_v2/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/authorization/api_permissions.py (drs_3cb1fbfb)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/authorization/api_permissions.py' matches configured sensitive codepath pattern 'dojo/authorization/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/authorization/url_permissions.py (drs_60c69dc2)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/authorization/url_permissions.py' matches configured sensitive codepath pattern 'dojo/authorization/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0278_global_search_fts_trigram_indexes.py (drs_960af03a)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/db_migrations/0278_global_search_fts_trigram_indexes.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0279_jira_project_transition_fields.py (drs_57e39d80)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/db_migrations/0279_jira_project_transition_fields.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0280_vulnerability_id_type.py (drs_c5c451f3)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/db_migrations/0280_vulnerability_id_type.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0281_backfill_vulnerability_id_type.py (drs_b8dd1274)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/db_migrations/0281_backfill_vulnerability_id_type.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0282_unique_finding_vulnerability_id.py (drs_2c303f91)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/db_migrations/0282_unique_finding_vulnerability_id.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0283_finding_cwe.py (drs_adba0a9c)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/db_migrations/0283_finding_cwe.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0284_backfill_finding_cwe.py (drs_afc9e70f)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/db_migrations/0284_backfill_finding_cwe.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/endpoint/models.py (drs_66163358)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/endpoint/models.py' matches configured sensitive codepath pattern 'dojo/endpoint/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/engagement/models.py (drs_b554aa55)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/engagement/models.py' matches configured sensitive codepath pattern 'dojo/engagement/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding/cwe.py (drs_1f9057c2)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/finding/cwe.py' matches configured sensitive codepath pattern 'dojo/finding/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding/deduplication.py (drs_aeda20b9)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/finding/deduplication.py' matches configured sensitive codepath pattern 'dojo/finding/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding/helper.py (drs_99b3d871)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/finding/helper.py' matches configured sensitive codepath pattern 'dojo/finding/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding/models.py (drs_cc0e98e5)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/finding/models.py' matches configured sensitive codepath pattern 'dojo/finding/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding/vulnerability_id.py (drs_f50bf4ce)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/finding/vulnerability_id.py' matches configured sensitive codepath pattern 'dojo/finding/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/importers/base_importer.py (drs_28411a05)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/importers/base_importer.py' matches configured sensitive codepath pattern 'dojo/importers/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/importers/default_importer.py (drs_24265982)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/importers/default_importer.py' matches configured sensitive codepath pattern 'dojo/importers/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/importers/default_reimporter.py (drs_fde975e8)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/importers/default_reimporter.py' matches configured sensitive codepath pattern 'dojo/importers/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/jira/api/serializers.py (drs_3d98c79f)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/jira/api/serializers.py' matches configured sensitive codepath pattern 'dojo/jira/**/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/jira/forms.py (drs_be8e5285)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/jira/forms.py' matches configured sensitive codepath pattern 'dojo/jira/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/jira/helper.py (drs_9ed6a0ef)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/jira/helper.py' matches configured sensitive codepath pattern 'dojo/jira/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/jira/models.py (drs_1ebf1af0)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/jira/models.py' matches configured sensitive codepath pattern 'dojo/jira/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/models.py (drs_7bdb468f)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/models.py' matches configured sensitive codepath pattern 'dojo/models.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/product/models.py (drs_ab797636)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/product/models.py' matches configured sensitive codepath pattern 'dojo/product/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/product_type/models.py (drs_a317055f)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/product_type/models.py' matches configured sensitive codepath pattern 'dojo/product_type/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/ad_hoc_findings.html (drs_b1a72b50)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/templates/dojo/ad_hoc_findings.html' matches configured sensitive codepath pattern 'dojo/templates/**/*.html' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/add_findings.html (drs_a34ff00c)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/templates/dojo/add_findings.html' matches configured sensitive codepath pattern 'dojo/templates/**/*.html' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/edit_finding.html (drs_9e02f90a)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/templates/dojo/edit_finding.html' matches configured sensitive codepath pattern 'dojo/templates/**/*.html' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_finding.html (drs_53ae2178)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/templates/dojo/view_finding.html' matches configured sensitive codepath pattern 'dojo/templates/**/*.html' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/test/models.py (drs_8dcc89c0)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/test/models.py' matches configured sensitive codepath pattern 'dojo/test/*.py' and was modified by 'samiat4911' (commit 2ce2434) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/apps.py (drs_ab8970b8)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/apps.py' matches configured sensitive codepath pattern 'dojo/apps.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/authorization/query_registrations.py (drs_4236d460)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/authorization/query_registrations.py' matches configured sensitive codepath pattern 'dojo/authorization/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/authorization/template_filters.py (drs_93fed707)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/authorization/template_filters.py' matches configured sensitive codepath pattern 'dojo/authorization/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/celery.py (drs_cb2ae1cd)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/celery.py' matches configured sensitive codepath pattern 'dojo/celery.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/endpoint/queries.py (drs_7db81796)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/endpoint/queries.py' matches configured sensitive codepath pattern 'dojo/endpoint/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/engagement/queries.py (drs_addec194)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/engagement/queries.py' matches configured sensitive codepath pattern 'dojo/engagement/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding/queries.py (drs_cbc0a9f4)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/finding/queries.py' matches configured sensitive codepath pattern 'dojo/finding/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding_group/queries.py (drs_6921a80b)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/finding_group/queries.py' matches configured sensitive codepath pattern 'dojo/finding_group/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/forms.py (drs_50241f58)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/forms.py' matches configured sensitive codepath pattern 'dojo/forms.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/jira/queries.py (drs_33c48cad)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/jira/queries.py' matches configured sensitive codepath pattern 'dojo/jira/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/middleware.py (drs_9aa2a133)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/middleware.py' matches configured sensitive codepath pattern 'dojo/middleware.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/product/queries.py (drs_ac1f0036)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/product/queries.py' matches configured sensitive codepath pattern 'dojo/product/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/product_type/queries.py (drs_7328a071)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/product_type/queries.py' matches configured sensitive codepath pattern 'dojo/product_type/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/risk_acceptance/queries.py (drs_d59811a6)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/risk_acceptance/queries.py' matches configured sensitive codepath pattern 'dojo/risk_acceptance/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/search/views.py (drs_9a3f0ac0)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/search/views.py' matches configured sensitive codepath pattern 'dojo/search/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/test/queries.py (drs_20ad7ce9)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/test/queries.py' matches configured sensitive codepath pattern 'dojo/test/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/tool_product/queries.py (drs_20e87ffd)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/tool_product/queries.py' matches configured sensitive codepath pattern 'dojo/tool_product/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/user/queries.py (drs_dba2e7cf)
Vulnerability Configured Sensitive Codepath Modified by Non-Allowed Author
Description File 'dojo/user/queries.py' matches configured sensitive codepath pattern 'dojo/user/*.py' and was modified by 'samiat4911' (commit f8f9eb8) who is not in the allowed authors list.

We've notified @mtesauro.


Comment to provide feedback on these findings.

Report false positive: @dryrunsecurity fp [FINDING ID] [FEEDBACK]
Report low-impact: @dryrunsecurity nit [FINDING ID] [FEEDBACK]

Example: @dryrunsecurity fp drs_90eda195 This code is not user-facing

All finding details can be found in the DryRun Security Dashboard.

@github-actions

Copy link
Copy Markdown
Contributor

Conflicts have been resolved. A maintainer will review the pull request shortly.

@Maffooch
Maffooch requested review from rossops and removed request for blakeaowens and mtesauro July 22, 2026 23:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants