All pull requests

Pull requests

• fix(backend): bound decoded size of transfer import archives

  kind/bugpriority/p2security
  #178·herikwebb opened Oct 11, 2026Owner·

  ·

• fix(frontend): strip caller credentials from artifact proxy requests

  kind/bugpriority/p1security
  #176·herikwebb opened Oct 5, 2026Owner·

  ·
  2

• fix(frontend): require readLog authorization for UI pod logs and info

  kind/bugpriority/p1security
  #175·herikwebb opened Oct 4, 2026Owner·

  ·
  2

• fix(backend): reauthorize service accounts when enabling recurring runs

  bugpriority/p2security
  #174·herikwebb opened Oct 3, 2026Owner·2 tasks done·

  ·
  2

• fix(sdk): escape server-provided ids in notebook detail links

  bugpriority/p2security
  #171·herikwebb opened Sep 30, 2026Owner·3 tasks done·

  ·
  1

  8

• fix(backend): require an identity to read shared pipelines

  bugpriority/p2security
  #170·herikwebb opened Sep 30, 2026Owner·3 tasks done·

  ·
  1

  7

• fix(backend): drop per-tenant labels from workflow run gauges

  bugok-to-testpriority/p2security
  #167·herikwebb opened Sep 27, 2026Owner·2 tasks done·

  ·
  1

  2

• fix(backend): scope kubernetes pipeline listing to the requested namespace

  bugok-to-testpriority/p2security
  #165·herikwebb opened Sep 26, 2026Owner·2 tasks done·

  ·
  1

  6

• fix(frontend): reject cross-site state-changing requests in the ui server

  bugok-to-testpriority/p2security
  #163·herikwebb opened Sep 25, 2026Owner·2 tasks done·

  ·
  1

  3

• fix(backend): bound api server request bodies and grpc message size

  bugok-to-testpriority/p2security
  #161·herikwebb opened Sep 25, 2026Owner·2 tasks done·

  ·
  1

  3

• fix(frontend): keep caller credentials out of the tensorboard proxy

  ok-to-testpriority/p1security
  #159·herikwebb opened Sep 23, 2026Owner·

  ·
  1

  4

• fix(frontend): stream gcs artifact matches instead of buffering them

  bugok-to-testsecurity
  #155·herikwebb opened Sep 21, 2026Owner·

  ·
  1

  3

• fix(frontend): scope workflow-status pod log keys to the run namespace

  bugpriority/p1security
  #153·herikwebb opened Sep 20, 2026Owner·2 tasks done·

  ·
  2

• fix(sdk): store kfp client credentials with owner-only permissions

  bugpriority/p2security
  #151·herikwebb opened Sep 17, 2026Owner·2 tasks done·

  ·
  2

• fix(backend): stop run creation from returning a run that owns a caller-chosen id

  ok-to-testpriority/p1
  #142·herikwebb opened Sep 12, 2026Owner·

  ·
  1

  2