Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Events
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
accso
SecureCheckPlus
Repository navigation
Code
Issues
35
(35)
Pull requests
12
(12)
Discussions
Actions
Projects
Security and quality
Insights
More
items
Security hardening: timing attacks, LDAP injection, auth guards, permissions
- #65
#65
Open
minh-tg
wants to merge 13 commits into
accso:main
accso/SecureCheckPlus:main
from
minh-tg:pr/security-hardening
minh-tg/SecureCheckNext:pr/security-hardening
Copy head branch name to clipboard
Conversation
Commits
13
(13)
Checks
Files changed
Open
Security hardening: timing attacks, LDAP injection, auth guards, permissions
#65
minh-tg
wants to merge 13 commits into
accso:main
accso/SecureCheckPlus:main
from
minh-tg:pr/security-hardening
minh-tg/SecureCheckNext:pr/security-hardening
Copy head branch name to clipboard
Commits
Commits on Jun 27, 2026
test: mock NVD API calls, add nvd_integration marker
Show description for c82483e
minh-tg
committed
c82483e
View commit details
Copy full SHA for c82483e
Browse repository at this point
fix: guard Docker Login and add hybrid fallback for DB/SALT
minh-tg
committed
c5c6680
View commit details
Copy full SHA for c5c6680
Browse repository at this point
security: fix timing attack on API key verification (C1)
Show description for 59b4dba
minh-tg
committed
59b4dba
View commit details
Copy full SHA for 59b4dba
Browse repository at this point
security: prevent LDAP injection via username escaping (C2)
Show description for 79e9fd7
minh-tg
committed
79e9fd7
View commit details
Copy full SHA for 79e9fd7
Browse repository at this point
security: guard dev auth with IS_DEV check (C3)
Show description for 03b1ec3
minh-tg
committed
03b1ec3
View commit details
Copy full SHA for 03b1ec3
Browse repository at this point
security: add permission check to DeleteProjectAPI (H1)
Show description for 2314791
minh-tg
committed
2314791
View commit details
Copy full SHA for 2314791
Browse repository at this point
security: validate CVE ID format and add request timeouts (H2)
Show description for 030d4ab
minh-tg
committed
030d4ab
View commit details
Copy full SHA for 030d4ab
Browse repository at this point
security: whitelist templates in HtmlView (H5)
Show description for 835b2a2
minh-tg
committed
835b2a2
View commit details
Copy full SHA for 835b2a2
Browse repository at this point
security: improve Docker security configuration (L1/L2/L3)
Show description for 25b1a4c
minh-tg
committed
25b1a4c
View commit details
Copy full SHA for 25b1a4c
Browse repository at this point
security: rate limiting, dev creds, CORS, HTTPS settings (H3/H4/M2/M3)
Show description for b41e3e9
minh-tg
committed
b41e3e9
View commit details
Copy full SHA for b41e3e9
Browse repository at this point
fix: update test assertions from 406 to 200 (content negotiation now works)
minh-tg
committed
da0ae14
View commit details
Copy full SHA for da0ae14
Browse repository at this point
Revert "fix: update test assertions from 406 to 200 (content negotiation now works)"
Show description for 09f8279
minh-tg
committed
09f8279
View commit details
Copy full SHA for 09f8279
Browse repository at this point
fix: make dev admin a superuser so permission checks pass
minh-tg
committed
c3418d8
View commit details
Copy full SHA for c3418d8
Browse repository at this point
You can’t perform that action at this time.