Search results

[Security] HIGH-12 Restrict Tencent SSH ingress

Status: Open.

#19 In kenken64/clawmacdo;

· kenken64 opened on Mar 22, 2026

[Security] HIGH-11 Scope AWS credentials to each subprocess

Status: Open.

#18 In kenken64/clawmacdo;

· kenken64 opened on Mar 22, 2026

[Security] HIGH-10 Replace panic-prone unwrap calls with controlled errors

Status: Open.

#17 In kenken64/clawmacdo;

· kenken64 opened on Mar 22, 2026

[Security] HIGH-09 Reduce secrets loaded into the runtime environment

Status: Open.

#16 In kenken64/clawmacdo;

· kenken64 opened on Mar 22, 2026

[Security] HIGH-08 Restrict ssh_key_path accepted by HTTP endpoints

Status: Open.

#15 In kenken64/clawmacdo;

· kenken64 opened on Mar 22, 2026

[Security] HIGH-07 Restrict backup paths accepted by the HTTP API

Status: Open.

#14 In kenken64/clawmacdo;

· kenken64 opened on Mar 22, 2026

[Security] HIGH-06 Replace wildcard sudoers rules with exact allowed commands

Status: Open.

#13 In kenken64/clawmacdo;

· kenken64 opened on Mar 22, 2026

[Security] HIGH-05 Remove root-equivalent Docker group access

Status: Open.

#12 In kenken64/clawmacdo;

· kenken64 opened on Mar 22, 2026

[Security] HIGH-04 Harden backup archive extraction

Status: Open.

#11 In kenken64/clawmacdo;

· kenken64 opened on Mar 22, 2026

[Security] HIGH-03 Remove secrets from process command lines

Status: Open.

#10 In kenken64/clawmacdo;

· kenken64 opened on Mar 22, 2026

[Security] HIGH-02 Validate hostname before it reaches shell commands

Status: Open.

#9 In kenken64/clawmacdo;

· kenken64 opened on Mar 22, 2026

[Security] HIGH-01 Replace fragile shell escaping in provisioning helpers

Status: Open.

#8 In kenken64/clawmacdo;

· kenken64 opened on Mar 22, 2026