Mark/llm_quota
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[Security] HIGH: 19 issue(s) found in llm_quota #14

New issue
Closed
opened 2026-05-14 23:24:54 +00:00 by Mark · 3 comments
Mark commented 2026-05-14 23:24:54 +00:00
Owner
Copy link

Security Scan Results for llm_quota

Severity: HIGH
Findings: 19

1. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 91916f42
  • Commit: 91916f42
  • Pattern: AWS Secret Key

2. secret_in_diff

  • Details: Potential AWS Secret Key found in commit efff7314
  • Commit: efff7314
  • Pattern: AWS Secret Key

3. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 5954b72e
  • Commit: 5954b72e
  • Pattern: AWS Secret Key

4. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 7a2a6857
  • Commit: 7a2a6857
  • Pattern: AWS Secret Key

5. secret_in_diff

  • Details: Potential AWS Secret Key found in commit c079092c
  • Commit: c079092c
  • Pattern: AWS Secret Key

6. secret_in_diff

  • Details: Potential AWS Secret Key found in commit f0ee842f
  • Commit: f0ee842f
  • Pattern: AWS Secret Key

7. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 421c21c7
  • Commit: 421c21c7
  • Pattern: AWS Secret Key

8. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 28d5101d
  • Commit: 28d5101d
  • Pattern: AWS Secret Key

9. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 1deff898
  • Commit: 1deff898
  • Pattern: AWS Secret Key

10. secret_in_diff

  • Details: Potential AWS Secret Key found in commit d1d83788
  • Commit: d1d83788
  • Pattern: AWS Secret Key

11. secret_in_diff

  • Details: Potential Password in URL found in commit f1d2e981
  • Commit: f1d2e981
  • Pattern: Password in URL

12. secret_in_diff

  • Details: Potential Password in URL found in commit f7f15cda
  • Commit: f7f15cda
  • Pattern: Password in URL

13. secret_in_diff

  • Details: Potential Password in URL found in commit 184ecd94
  • Commit: 184ecd94
  • Pattern: Password in URL

14. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 08d6b6ed
  • Commit: 08d6b6ed
  • Pattern: AWS Secret Key

15. secret_in_diff

  • Details: Potential AWS Secret Key found in commit dbae743a
  • Commit: dbae743a
  • Pattern: AWS Secret Key

16. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 66e6cfd7
  • Commit: 66e6cfd7
  • Pattern: AWS Secret Key

17. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 593de959
  • Commit: 593de959
  • Pattern: AWS Secret Key

18. secret_in_diff

  • Details: Potential AWS Secret Key found in commit cedab12a
  • Commit: cedab12a
  • Pattern: AWS Secret Key

19. secret_in_diff

  • Details: Potential AWS Secret Key found in commit 6658e596
  • Commit: 6658e596
  • Pattern: AWS Secret Key

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `llm_quota` **Severity:** HIGH **Findings:** 19 ### 1. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 91916f42 - **Commit:** `91916f42` - **Pattern:** `AWS Secret Key` ### 2. secret_in_diff - **Details:** Potential AWS Secret Key found in commit efff7314 - **Commit:** `efff7314` - **Pattern:** `AWS Secret Key` ### 3. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 5954b72e - **Commit:** `5954b72e` - **Pattern:** `AWS Secret Key` ### 4. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 7a2a6857 - **Commit:** `7a2a6857` - **Pattern:** `AWS Secret Key` ### 5. secret_in_diff - **Details:** Potential AWS Secret Key found in commit c079092c - **Commit:** `c079092c` - **Pattern:** `AWS Secret Key` ### 6. secret_in_diff - **Details:** Potential AWS Secret Key found in commit f0ee842f - **Commit:** `f0ee842f` - **Pattern:** `AWS Secret Key` ### 7. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 421c21c7 - **Commit:** `421c21c7` - **Pattern:** `AWS Secret Key` ### 8. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 28d5101d - **Commit:** `28d5101d` - **Pattern:** `AWS Secret Key` ### 9. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 1deff898 - **Commit:** `1deff898` - **Pattern:** `AWS Secret Key` ### 10. secret_in_diff - **Details:** Potential AWS Secret Key found in commit d1d83788 - **Commit:** `d1d83788` - **Pattern:** `AWS Secret Key` ### 11. secret_in_diff - **Details:** Potential Password in URL found in commit f1d2e981 - **Commit:** `f1d2e981` - **Pattern:** `Password in URL` ### 12. secret_in_diff - **Details:** Potential Password in URL found in commit f7f15cda - **Commit:** `f7f15cda` - **Pattern:** `Password in URL` ### 13. secret_in_diff - **Details:** Potential Password in URL found in commit 184ecd94 - **Commit:** `184ecd94` - **Pattern:** `Password in URL` ### 14. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 08d6b6ed - **Commit:** `08d6b6ed` - **Pattern:** `AWS Secret Key` ### 15. secret_in_diff - **Details:** Potential AWS Secret Key found in commit dbae743a - **Commit:** `dbae743a` - **Pattern:** `AWS Secret Key` ### 16. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 66e6cfd7 - **Commit:** `66e6cfd7` - **Pattern:** `AWS Secret Key` ### 17. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 593de959 - **Commit:** `593de959` - **Pattern:** `AWS Secret Key` ### 18. secret_in_diff - **Details:** Potential AWS Secret Key found in commit cedab12a - **Commit:** `cedab12a` - **Pattern:** `AWS Secret Key` ### 19. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 6658e596 - **Commit:** `6658e596` - **Pattern:** `AWS Secret Key` --- *This issue was auto-generated by the security sweep cron job.*
Mark commented 2026-05-18 08:30:34 +00:00
Author
Owner
Copy link
GSD VERIFY phase failed after 3 attempts.
**/*.{test,spec}.?(c|m)[jt]s?(x)
exclude: **/node_modules/, /.git/**
Running linter...
✅ Lint clean
Running type checker...
✅ Types check clean
Previous test count: true

❌ GATE FAIL: verify-passed
- Tests failed with exit code 1
GATE FAIL: verify — blocked at 2026-05-18T08:30:34Z
Class: test-failure
Evidence: Verification failed: 1 failures
Git tag: llm_quota#14-gate-verify-fail-e6e1b563cf91 (use gate-retry after fixing)

GSD VERIFY phase failed after 3 attempts. : **/*.{test,spec}.?(c|m)[jt]s?(x) exclude: **/node_modules/**, **/.git/** Running linter... ✅ Lint clean Running type checker... ✅ Types check clean Previous test count: true ❌ GATE FAIL: verify-passed - Tests failed with exit code 1 GATE FAIL: verify — blocked at 2026-05-18T08:30:34Z Class: test-failure Evidence: Verification failed: 1 failures Git tag: llm_quota#14-gate-verify-fail-e6e1b563cf91 (use gate-retry after fixing)
Mark commented 2026-05-18 08:52:31 +00:00
Author
Owner
Copy link

GSD RESEARCH phase could not determine a clear fix.

⟳ compacting context…
⚠️ Reached maximum iterations (90). Requesting summary...
STATUS: UNCLEAR

EVIDENCE:

  • The issue references commit f1d2e981 which does not exist in the repository. Only f7f15cda, 184ecd94, and 08d6b6ed are present.
  • The issue title claims "19 issue(s) found" but provides no list of what those 19 issues are.
  • The commit message "fix: resolve CI, lint, security, and config issues" (1deff898) is the closest match to a security-related fix, but it's unclear if this
GSD RESEARCH phase could not determine a clear fix. ⟳ compacting context… ⚠️ Reached maximum iterations (90). Requesting summary... STATUS: UNCLEAR EVIDENCE: - The issue references commit `f1d2e981` which does not exist in the repository. Only `f7f15cda`, `184ecd94`, and `08d6b6ed` are present. - The issue title claims "19 issue(s) found" but provides no list of what those 19 issues are. - The commit message "fix: resolve CI, lint, security, and config issues" (1deff898) is the closest match to a security-related fix, but it's unclear if this
Mark commented 2026-05-23 18:33:49 +00:00
Author
Owner
Copy link

No longer reproducible — gitleaks scan shows 0 findings in current tree and git history. These were likely in old commits that have since been cleaned up or were false positives resolved by code changes.

Closing as resolved.

No longer reproducible — gitleaks scan shows 0 findings in current tree and git history. These were likely in old commits that have since been cleaned up or were false positives resolved by code changes. Closing as resolved.
Mark closed this issue 2026-05-23 18:33:49 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels   
blocked:children

Blocked by child issues

  
blocked:commit-ready-failed

Gate: commit failed verification

  
blocked:gate-fetch

Gate: fetch phase needs attention

  
blocked:gate-lint

   
blocked:gate-plan

Gate: plan phase needs attention

  
blocked:gate-research

Gate: research phase needs attention

  
blocked:lint-failed

   
blocked:needs-decision

   
blocked:needs-human

Requires human intervention to fix

  
blocked:no-changes

No changes needed — issue already addressed

  
blocked:verify-failed

   
bug

Something is broken or incorrect

  
deferred

Deferred to a later milestone

  
feature-request

   
in-progress

Work in progress

  
needs-decompose

Issue needs decompose processing

  
needs-triage

   
quickfix

   
security/high

High severity security issue

  
security/medium

Medium severity security issue

  
test-coverage

Test coverage review / gap report

  
triage-approved
No labels
blocked:children
blocked:commit-ready-failed
blocked:gate-fetch
blocked:gate-lint
blocked:gate-plan
blocked:gate-research
blocked:lint-failed
blocked:needs-decision
blocked:needs-human
blocked:no-changes
blocked:verify-failed
bug
deferred
feature-request
in-progress
needs-decompose
needs-triage
quickfix
security/high
security/medium
test-coverage
triage-approved
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Mark/llm_quota#14
No description provided.