Skip to content

chore: sync infra OpenAPI specs#407

Open
e2b-generated-code-auto-fixer[bot] wants to merge 2 commits into
mainfrom
chore/sync-infra-specs
Open

chore: sync infra OpenAPI specs#407
e2b-generated-code-auto-fixer[bot] wants to merge 2 commits into
mainfrom
chore/sync-infra-specs

Conversation

@e2b-generated-code-auto-fixer

Copy link
Copy Markdown
Contributor

This PR syncs OpenAPI specs from e2b-dev/infra:

  • spec/openapi.infra.yaml
  • spec/openapi.dashboard-api.yaml

It also regenerates dependent TypeScript API types and applies formatting/lint autofixes.


This PR was automatically created by the sync-infra-specs workflow.

@vercel

vercel Bot commented Jun 12, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
web Ready Ready Preview, Comment Jun 14, 2026 3:58pm

Request Review

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stale comment

Comment thread spec/openapi.infra.yaml
maxLength: 255
description: >-
Optional SOCKS5 username (RFC 1929), max 255 bytes.
password:

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔒 Agentic Security Review
Severity: HIGH
The new SandboxEgressProxyConfig.password field is modeled on a schema that is also referenced by response-side sandbox network objects, so this change can expose proxy credentials in sandbox read responses.

Impact: Any principal that can read sandbox details may obtain reusable SOCKS5 credentials, leading to credential leakage and potential unauthorized proxy use.

Fix in Cursor Fix in Web

Reviewed by Cursor Security Reviewer for commit 3e9c338. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant