Skip to content

fix(orb): authenticate fleet telemetry ingest - #1285

Merged
JSONbored merged 2 commits into
mainfrom
codex/fix-unauthenticated-orb-data-vulnerability
Jun 26, 2026
Merged

fix(orb): authenticate fleet telemetry ingest#1285
JSONbored merged 2 commits into
mainfrom
codex/fix-unauthenticated-orb-data-vulnerability

fix(orb): constant-time compare the ingest token (timingSafeEqual)

123d814
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project succeeded Jun 26, 2026 in 1s

95.37% (+0.00%) compared to 8761078

View this Pull Request on Codecov

95.37% (+0.00%) compared to 8761078

Details

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.37%. Comparing base (8761078) to head (123d814).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1285   +/-   ##
=======================================
  Coverage   95.37%   95.37%           
=======================================
  Files         192      192           
  Lines       20866    20874    +8     
  Branches     7546     7549    +3     
=======================================
+ Hits        19901    19909    +8     
  Misses        383      383           
  Partials      582      582           
Files with missing lines Coverage Δ
src/api/routes.ts 94.60% <100.00%> (+<0.01%) ⬆️
src/orb/ingest.ts 100.00% <100.00%> (ø)
src/selfhost/orb-collector.ts 100.00% <100.00%> (ø)
🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.