[Security] HIGH: 10 issue(s) found in transcriber #12

New issue

Closed

opened 2026-05-14 23:22:12 +00:00 by Mark · 1 comment

Mark commented

2026-05-14 23:22:12 +00:00

Owner

Security Scan Results for `transcriber`

Severity: HIGH
Findings: 10

1. secret_in_diff

Details: Potential AWS Secret Key found in commit 6d703c3a
Commit: 6d703c3a
Pattern: AWS Secret Key

2. secret_in_diff

Details: Potential AWS Secret Key found in commit 64ca3b76
Commit: 64ca3b76
Pattern: AWS Secret Key

3. secret_in_diff

Details: Potential AWS Secret Key found in commit 3b396a07
Commit: 3b396a07
Pattern: AWS Secret Key

4. secret_in_diff

Details: Potential AWS Secret Key found in commit c3c1ceed
Commit: c3c1ceed
Pattern: AWS Secret Key

5. secret_in_diff

Details: Potential AWS Secret Key found in commit 3133c29e
Commit: 3133c29e
Pattern: AWS Secret Key

6. secret_in_diff

Details: Potential AWS Secret Key found in commit 02a32788
Commit: 02a32788
Pattern: AWS Secret Key

7. secret_in_diff

Details: Potential AWS Secret Key found in commit 90684774
Commit: 90684774
Pattern: AWS Secret Key

8. secret_in_diff

Details: Potential AWS Secret Key found in commit f5ab4485
Commit: f5ab4485
Pattern: AWS Secret Key

9. secret_in_diff

Details: Potential AWS Secret Key found in commit f4ff92ab
Commit: f4ff92ab
Pattern: AWS Secret Key

10. secret_in_diff

Details: Potential AWS Secret Key found in commit 1e15b9f7
Commit: 1e15b9f7
Pattern: AWS Secret Key

This issue was auto-generated by the security sweep cron job.

## Security Scan Results for `transcriber` **Severity:** HIGH **Findings:** 10 ### 1. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 6d703c3a - **Commit:** `6d703c3a` - **Pattern:** `AWS Secret Key` ### 2. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 64ca3b76 - **Commit:** `64ca3b76` - **Pattern:** `AWS Secret Key` ### 3. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 3b396a07 - **Commit:** `3b396a07` - **Pattern:** `AWS Secret Key` ### 4. secret_in_diff - **Details:** Potential AWS Secret Key found in commit c3c1ceed - **Commit:** `c3c1ceed` - **Pattern:** `AWS Secret Key` ### 5. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 3133c29e - **Commit:** `3133c29e` - **Pattern:** `AWS Secret Key` ### 6. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 02a32788 - **Commit:** `02a32788` - **Pattern:** `AWS Secret Key` ### 7. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 90684774 - **Commit:** `90684774` - **Pattern:** `AWS Secret Key` ### 8. secret_in_diff - **Details:** Potential AWS Secret Key found in commit f5ab4485 - **Commit:** `f5ab4485` - **Pattern:** `AWS Secret Key` ### 9. secret_in_diff - **Details:** Potential AWS Secret Key found in commit f4ff92ab - **Commit:** `f4ff92ab` - **Pattern:** `AWS Secret Key` ### 10. secret_in_diff - **Details:** Potential AWS Secret Key found in commit 1e15b9f7 - **Commit:** `1e15b9f7` - **Pattern:** `AWS Secret Key` --- *This issue was auto-generated by the security sweep cron job.*

Mark added the

triage-approved

bug

labels

2026-05-17 22:57:54 +00:00

Mark commented

2026-05-19 13:55:20 +00:00

Author

Owner

Closing as noise. The security scanner generates false positives from package-lock.json integrity hashes, stale dist/ artifacts, and transitive npm vulns. Issue filed on hermes-scripts#29 to fix the scanner.

Mark closed this issue

2026-05-19 13:55:20 +00:00

Mark referenced this issue

2026-05-23 01:20:33 +00:00

Add speaker label display and subject markers in playback/transcript UI #15

Mark referenced this issue

2026-05-23 01:21:47 +00:00

Add post-recording diarization support via cloud STT with speaker labels #18

Mark referenced this issue

2026-05-23 16:43:03 +00:00

Add post-recording diarization support via cloud STT with speaker labels #18