Skip to content

fix(orb): bind enrollment admin checks to immutable GitHub account ids - #1393

Merged
JSONbored merged 5 commits into
mainfrom
codex/fix-oauth-self-enrollment-login-vulnerability
Jun 27, 2026
Merged

fix(orb): bind enrollment admin checks to immutable GitHub account ids#1393
JSONbored merged 5 commits into
mainfrom
codex/fix-oauth-self-enrollment-login-vulnerability

fix(migrations): renumber orb account_id migration to 0077 (resolve 0…

d373376
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project succeeded Jun 27, 2026 in 1s

95.42% (-0.01%) compared to 6ffc2d0, passed because coverage increased by 0% when compared to adjusted base (95.43%)

View this Pull Request on Codecov

95.42% (-0.01%) compared to 6ffc2d0, passed because coverage increased by 0% when compared to adjusted base (95.43%)

Details

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.42%. Comparing base (6ffc2d0) to head (d373376).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1393      +/-   ##
==========================================
- Coverage   95.43%   95.42%   -0.01%     
==========================================
  Files         202      202              
  Lines       21743    21743              
  Branches     7856     7857       +1     
==========================================
- Hits        20750    20749       -1     
  Misses        416      416              
- Partials      577      578       +1     
Files with missing lines Coverage Δ
src/orb/app-auth.ts 100.00% <100.00%> (ø)
src/orb/installations.ts 100.00% <100.00%> (ø)
src/orb/oauth.ts 97.56% <100.00%> (-2.44%) ⬇️
🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.