Skip to content

feat(frontend): merge insight-front into the monorepo - #2223

Merged
aleksdotbar merged 481 commits into
mainfrom
merge/insight-front
Aug 5, 2026
Merged

feat(frontend): merge insight-front into the monorepo#2223
aleksdotbar merged 481 commits into
mainfrom
merge/insight-front

chore: trim the frontend CI comments

6947967
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / Trivy failed Aug 5, 2026 in 5s

14 configurations not found

Warning: Code scanning may not have found all the alerts introduced by this pull request, because 14 configurations present on refs/heads/main were not found:

Actions workflow (trivy-images.yml)

  • ❓  trivy-image:insight-analytics
  • ❓  trivy-image:insight-authenticator
  • ❓  trivy-image:insight-gateway
  • ❓  trivy-image:insight-identity
  • ❓  trivy-image:insight-identity-resolution
  • ❓  trivy-image:insight-jira-enrich
  • ❓  trivy-image:insight-toolbox
  • ❓  trivy-image:source-active-directory-insight
  • ❓  trivy-image:source-bitbucket-cloud-insight
  • ❓  trivy-image:source-github-copilot-insight
  • ❓  trivy-image:source-github-v2-insight
  • ❓  trivy-image:source-gitlab-insight
  • ❓  trivy-image:source-hubspot-insight
  • ❓  trivy-image:source-salesforce-insight

New alerts in code changed by this pull request

Security Alerts:

  • 8 high
  • 5 medium
  • 4 low

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality High

Package: uuid
Installed Version: 8.3.2
Vulnerability CVE-2026-41907
Severity: MEDIUM
Fixed Version: 11.1.1, 12.0.1, 13.0.1
Link: CVE-2026-41907

Check failure on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass High

Package: ip-address
Installed Version: 10.2.0
Vulnerability CVE-2026-69192
Severity: HIGH
Fixed Version: 10.3.1
Link: CVE-2026-69192

Check failure on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority High

Package: fast-uri
Installed Version: 3.1.4
Vulnerability CVE-2026-18446
Severity: HIGH
Fixed Version: 2.4.4, 3.1.5, 4.1.2
Link: CVE-2026-18446

Check failure on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation High

Package: brace-expansion
Installed Version: 5.0.8
Vulnerability CVE-2026-69152
Severity: HIGH
Fixed Version: 1.1.18, 2.1.4, 3.0.6, 5.0.9
Link: CVE-2026-69152

Check failure on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation High

Package: brace-expansion
Installed Version: 2.1.2
Vulnerability CVE-2026-69152
Severity: HIGH
Fixed Version: 1.1.18, 2.1.4, 3.0.6, 5.0.9
Link: CVE-2026-69152

Check failure on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function High

Package: brace-expansion
Installed Version: 2.1.2
Vulnerability CVE-2026-14257
Severity: HIGH
Fixed Version: 5.0.8, 3.0.3, 2.1.3, 1.1.17
Link: CVE-2026-14257

Check failure on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation High

Package: brace-expansion
Installed Version: 1.1.16
Vulnerability CVE-2026-69152
Severity: HIGH
Fixed Version: 1.1.18, 2.1.4, 3.0.6, 5.0.9
Link: CVE-2026-69152

Check failure on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function High

Package: brace-expansion
Installed Version: 1.1.16
Vulnerability CVE-2026-14257
Severity: HIGH
Fixed Version: 5.0.8, 3.0.3, 2.1.3, 1.1.17
Link: CVE-2026-14257

Check warning on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) Medium

Package: @hono/node-server
Installed Version: 1.19.14
Vulnerability GHSA-frvp-7c67-39w9
Severity: MEDIUM
Fixed Version: 2.0.5, 1.19.15
Link: GHSA-frvp-7c67-39w9

Check warning on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

Hono: ReDoS in CORS middleware via Access-Control-Request-Headers Medium

Package: hono
Installed Version: 4.12.32
Vulnerability CVE-2026-69207
Severity: MEDIUM
Fixed Version: 4.12.34
Link: CVE-2026-69207

Check warning on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification Medium

Package: ip-address
Installed Version: 10.2.0
Vulnerability CVE-2026-54272
Severity: MEDIUM
Fixed Version: 10.2.1
Link: CVE-2026-54272

Check warning on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass Medium

Package: ip-address
Installed Version: 10.2.0
Vulnerability CVE-2026-69198
Severity: MEDIUM
Fixed Version: 10.2.2
Link: CVE-2026-69198

Check warning on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

### Summary `qs.stringify` throws `TypeError` when called with `arr ... Medium

Package: qs
Installed Version: 6.15.1
Vulnerability CVE-2026-8723
Severity: MEDIUM
Fixed Version: 6.15.2
Link: CVE-2026-8723

Check notice on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

body-parser: body-parser: Denial of Service via invalid limit option Low

Package: body-parser
Installed Version: 2.2.2
Vulnerability CVE-2026-12590
Severity: LOW
Fixed Version: 1.20.6, 2.3.0
Link: CVE-2026-12590

Check notice on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

esbuild allows arbitrary file read when running the development server on Windows Low

Package: esbuild
Installed Version: 0.27.7
Vulnerability GHSA-g7r4-m6w7-qqqr
Severity: LOW
Fixed Version: 0.28.1
Link: GHSA-g7r4-m6w7-qqqr

Check notice on line 1 in src/frontend/pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / Trivy

@babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment Low

Package: @babel/core
Installed Version: 7.29.0
Vulnerability CVE-2026-49356
Severity: LOW
Fixed Version: 8.0.0-rc.6, 7.29.6
Link: CVE-2026-49356

Check notice on line 1 in src/frontend/Dockerfile

See this annotation in the file changed.

Code scanning / Trivy

No HEALTHCHECK defined Low

Artifact: src/frontend/Dockerfile
Type: dockerfile
Vulnerability DS-0026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS-0026