vrr/Pulse
2
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-10-19 10:33:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 13
Pulse/internal
History
Richard Courtman 68f1ba8832 Block IPv6 transition addresses in the Assistant fetch guard 
isBlockedFetchIP had the same bypass as the audit webhook validator and the
restricted outbound transport fixed in 70d275288: every net.IP predicate it
uses reads only the literal address bytes, so 64:ff9b::a9fe:a9fe fetched
169.254.169.254 while looking like ordinary global unicast.

Reuse securityutil.EmbeddedIPv4Candidates rather than growing a second
AI-local list of transition prefixes, and hold each embedded destination to
the same policy as the outer address so PULSE_AI_ALLOW_LOOPBACK and
PULSE_AI_ALLOW_PRIVATE_IPS keep working through the wrapper.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-07-31 17:57:26 +01:00
..
actionlifecycle Fail actions stranded without agent completion evidence and add force-fail (#1649) 2026-07-29 12:14:28 +01:00
actionplanner Cover the alert read-model, guest identity and action-planner validators 2026-07-25 06:34:48 +01:00
agentcapabilities Refuse dispatch when action readiness is lost 2026-07-20 21:44:59 +01:00
agentcontext Add Go branch-coverage tests for pure helpers across six packages 2026-07-19 15:11:02 +01:00
agentexec Fix agent command channel admission 2026-07-24 13:00:03 +01:00
agenttarget Add report-only Unified Agent observer destinations 2026-07-19 15:30:34 +01:00
agenttls Modernize Unified Agent lifecycle and platform support 2026-07-09 23:20:35 +01:00
agentupdate Prepare v6.1.2 stable patch release 2026-07-26 20:38:42 +01:00
ai Block IPv6 transition addresses in the Assistant fetch guard 2026-07-31 17:57:26 +01:00
alerts feat(agent): add REST custom metrics 2026-07-30 19:08:28 +01:00
api feat(branding): customize application identity 2026-07-30 16:25:36 +01:00
availabilityprobe Extract availability probe execution into a shared package 2026-07-27 11:13:04 +01:00
bootstrap
cloudcp Bump postcss to 8.5.23 in both frontend lockfiles 2026-07-27 09:46:28 +01:00
config feat(alerts): add initial delivery routing 2026-07-30 15:37:53 +01:00
crypto
deploy
discovery
dockeragent fix outstanding integration and agent regressions 2026-07-29 22:10:04 +01:00
fleethealth Add Agent Doctor fleet diagnostics workflow 2026-07-20 19:53:34 +01:00
hostagent feat(proxmox): show all LXC filesystems 2026-07-30 22:42:04 +01:00
hosted
hostmetrics feat(storage): surface Proxmox ZFS datasets 2026-07-30 16:45:13 +01:00
kubernetesagent Cover agent policy, alias normalization and agent report helpers 2026-07-23 06:44:33 +01:00
license Register the external_probe Pro entitlement 2026-07-27 11:13:04 +01:00
logging Harden native Windows agent lifecycle 2026-07-10 19:16:23 +01:00
maintenancesentinel
metrics Coordinate incident recorder async persistence 2026-07-04 13:13:41 +01:00
mock Align the service availability fixture test with the check-row contract 2026-07-24 23:31:50 +01:00
mockmode Simulate Patrol end to end in demo/mock mode 2026-07-11 11:25:52 +01:00
mockmodel Add Go branch-coverage tests for canonical trust and recovery helpers 2026-07-19 15:11:01 +01:00
mockruntime Add Go branch-coverage tests for unified-resource pure helpers and platform fixtures 2026-07-20 10:49:11 +01:00
models feat(agent): monitor local XCP-ng pools 2026-07-30 21:15:05 +01:00
monitoring feat(proxmox): show all LXC filesystems 2026-07-30 22:42:04 +01:00
mutationregistry Classify the action force-fail route in the mutation registry (#1649) 2026-07-29 12:33:49 +01:00
notifications feat(alerts): add initial delivery routing 2026-07-30 15:37:53 +01:00
operationaltrust Harden Operational Trust rollout contracts 2026-07-19 15:11:02 +01:00
operationreceipt style(operationreceipt): goimports the sqlite blank import 2026-07-17 17:24:57 +01:00
platformsupport Fix agent update triage and durable action recovery 2026-07-23 11:19:50 +01:00
proxmoxidentity Harden PBS backup attribution against shared sources (#1639) 2026-07-28 12:02:46 +01:00
recovery Harden PBS backup attribution against shared sources (#1639) 2026-07-28 12:02:46 +01:00
relay Harden external probe outage alerting 2026-07-29 20:09:23 +01:00
remoteconfig Stop warning for permitted unsigned remote config 2026-07-29 23:03:00 +01:00
repoctl Fix Proxmox registration for host-token installs 2026-07-28 11:21:14 +01:00
securityutil Add Go branch-coverage tests for pure config and helper packages 2026-07-16 10:19:51 +01:00
sensors
servicediscovery Cover the missing arms of the SSRF, clone and classifier guards 2026-07-25 00:39:15 +01:00
ssh/knownhosts
storagehealth Cover the missing arms of the SSRF, clone and classifier guards 2026-07-25 00:39:15 +01:00
system
telemetry Fix alert and notification telemetry signals 2026-07-29 14:17:19 +01:00
testutil
truenas fix outstanding integration and agent regressions 2026-07-29 22:10:04 +01:00
unifiedresources feat(agent): monitor local XCP-ng pools 2026-07-30 21:15:05 +01:00
updates Cover the Unraid merge, setup classifier and retry helpers left untested 2026-07-22 08:06:56 +01:00
updatesignature Add Go branch-coverage tests for canonical trust and recovery helpers 2026-07-19 15:11:01 +01:00
utils Clear all errcheck and gofmt violations so make lint gates on real findings 2026-06-09 21:42:21 +01:00
vmware Fix VMware connection test degradation handling 2026-07-23 22:06:57 +01:00
websocket Document websocket lifecycle synchronization 2026-07-26 22:02:22 +01:00