Skip to content

security: close the remaining gaps after the Grafana hardening - #512

Open
OisinKyne wants to merge 2 commits into
mainfrom
oisin/hardening-follow-up
Open

OisinKyne wants to merge 2 commits into
mainfrom
oisin/hardening-follow-up

grafana: fix security-check.sh false positives and check Grafana 12+ …

7fa593f
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis succeeded Oct 28, 2026 in 18s

Annotations

Check warning on line 72 in .github/scripts/check_exposure.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Simplify this regular expression to reduce its runtime, as it has super-linear performance due to backtracking.

See more on https://sonarcloud.io/project/issues?id=ObolNetwork_charon-distributed-validator-node&issues=AaGCQE2IcNvCNlWV2pE1&open=AaGCQE2IcNvCNlWV2pE1&pullRequest=512

Check failure on line 123 in .github/scripts/check_exposure.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 29 to the 15 allowed.

See more on https://sonarcloud.io/project/issues?id=ObolNetwork_charon-distributed-validator-node&issues=AaGCQE2IcNvCNlWV2pE3&open=AaGCQE2IcNvCNlWV2pE3&pullRequest=512

Check failure on line 63 in grafana/security-check.sh

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Add a default case (*) to handle unexpected values.

See more on https://sonarcloud.io/project/issues?id=ObolNetwork_charon-distributed-validator-node&issues=AaGCQE4dcNvCNlWV2pE4&open=AaGCQE4dcNvCNlWV2pE4&pullRequest=512

Check failure on line 98 in .github/scripts/check_exposure.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 22 to the 15 allowed.

See more on https://sonarcloud.io/project/issues?id=ObolNetwork_charon-distributed-validator-node&issues=AaGCQE2IcNvCNlWV2pE2&open=AaGCQE2IcNvCNlWV2pE2&pullRequest=512