Semgrep SAST

Workflow runs for Semgrep SAST

• prod: pin image 2026.09.07.0173, per-IP ingress rate limiting (limit-connections 20)

  completed successfully:
  Semgrep SAST#205:Pull request#1078openedbyarielr-lt
  feat/prod-image-2026.09.07.0173-rate-limit

  Oct 7, 202652s
  More actions for workflow run 205

• sandbox: pin image 2026.09.07.0173, per-IP ingress rate limiting

  completed successfully:
  Semgrep SAST#204:Pull request#1077openedbyarielr-lt
  feat/sandbox-image-2026.09.07.0173-rate-limit

  Oct 6, 202653s
  More actions for workflow run 204

• Bump rubyzip from 2.4.1 to 3.4.0

  completed successfully:
  Semgrep SAST#203:Pull request#1076openedbydependabot[bot]Bot
  dependabot/bundler/rubyzip-3.4.0

  Sep 26, 202640s
  More actions for workflow run 203

• Add explicit exception logging and configuration updates.

  completed successfully:
  Semgrep SAST#202:Pull request#1075synchronizebyarielr-lt
  rjoy/mem-leak

  Sep 4, 202638s
  More actions for workflow run 202

• Registry production cluster: reduce platform node group 4 -> 2

  completed successfully:
  Semgrep SAST#201:Pull request#1072synchronizebyarielr-lt
  feat/private-nodegroup-4to2

  Sep 4, 202643s
  More actions for workflow run 201

• Add explicit exception logging and configuration updates.

  completed successfully:
  Semgrep SAST#200:Pull request#1075openedbyrohit-joy
  rjoy/mem-leak

  Sep 3, 202643s
  More actions for workflow run 200

• Update gems.

  completed successfully:
  Semgrep SAST#199:Pull request#1074openedbyrohit-joy
  rjoy/upgrade

  Sep 3, 202640s
  More actions for workflow run 199

• Registry production cluster: reduce platform node group 4 -> 2

  completed successfully:
  Semgrep SAST#198:Pull request#1072synchronizebyarielr-lt
  feat/private-nodegroup-4to2

  Sep 3, 202643s
  More actions for workflow run 198

• sandbox: consolidate to 2x t3.medium

  completed successfully:
  Semgrep SAST#197:Pull request#1071synchronizebyarielr-lt
  feat/sandbox-2-medium-nodes

  Sep 3, 202648s
  More actions for workflow run 197

• Upgrade cluster-autoscaler v1.26.4 -> v1.34.5

  completed successfully:
  Semgrep SAST#196:Pull request#1073openedbyarielr-lt
  chore/upgrade-cluster-autoscaler-1.34

  Sep 3, 202639s
  More actions for workflow run 196

• Registry production cluster: reduce platform node group 4 -> 2

  completed successfully:
  Semgrep SAST#195:Pull request#1072openedbyarielr-lt
  feat/private-nodegroup-4to2

  Sep 3, 202644s
  More actions for workflow run 195

• sandbox: consolidate to 2x t3.medium

  completed successfully:
  Semgrep SAST#194:Pull request#1071openedbyarielr-lt
  feat/sandbox-2-medium-nodes

  Sep 3, 202648s
  More actions for workflow run 194

• Add IAM (Keycloak) configuration to credreg-prod ConfigMap

  completed successfully:
  Semgrep SAST#193:Pull request#1049synchronizebyrohit-joy
  feat/credreg-prod-iam-configmap

  Sep 2, 202653s
  More actions for workflow run 193

• Bump rails-html-sanitizer from 1.7.0 to 1.7.1

  completed successfully:
  Semgrep SAST#192:Pull request#1070openedbydependabot[bot]Bot
  dependabot/bundler/rails-html-sanitizer-1.7.1

  Sep 2, 202652s
  More actions for workflow run 192

• Bump mcp from 0.9.2 to 0.23.0

  completed successfully:
  Semgrep SAST#191:Pull request#1069openedbydependabot[bot]Bot
  dependabot/bundler/mcp-0.23.0

  Sep 2, 202639s
  More actions for workflow run 191

• Bump json from 2.19.2 to 2.19.9

  completed successfully:
  Semgrep SAST#190:Pull request#1068openedbydependabot[bot]Bot
  dependabot/bundler/json-2.19.9

  Sep 2, 202649s
  More actions for workflow run 190

• chore(eks): release idle staging node group (ng_staging_min_size 1 → 0)

  completed successfully:
  Semgrep SAST#189:Pull request#1067openedbyarielr-lt
  chore/scale-down-staging-nodegroup

  Aug 25, 202643s
  More actions for workflow run 189

• Cap prod app node pool at 3 and stop memory-based autoscaling

  completed successfully:
  Semgrep SAST#188:Pull request#1065synchronizebyarielr-lt
  fix/prod-main-app-mem-rightsizing

  Aug 14, 202643s
  More actions for workflow run 188

• Cap prod app node pool at 3 and stop memory-based autoscaling

  completed successfully:
  Semgrep SAST#187:Pull request#1065openedbyarielr-lt
  fix/prod-main-app-mem-rightsizing

  Aug 14, 202643s
  More actions for workflow run 187

• Make changeset endpoint delivery attempts configurable (disable retries via env)

  completed successfully:
  Semgrep SAST#186:Pull request#1064synchronizebyarielr-lt
  feat/configurable-changeset-endpoint-attempts

  Aug 12, 20261m 1s
  More actions for workflow run 186

• Make changeset endpoint delivery attempts configurable (disable retries via env)

  completed successfully:
  Semgrep SAST#185:Pull request#1064openedbyarielr-lt
  feat/configurable-changeset-endpoint-attempts

  Aug 12, 202646s
  More actions for workflow run 185

• Prod changeset sync — Stage 2: app cutover (configmap, SA, image pin, runbook)

  completed successfully:
  Semgrep SAST#184:Pull request#1062synchronizebyarielr-lt
  feat/prod-changeset-cutover

  Aug 11, 202643s
  More actions for workflow run 184

• Prod changeset sync — Stage 2: app cutover (configmap, SA, image pin, runbook)

  completed successfully:
  Semgrep SAST#183:Pull request#1062openedbyarielr-lt
  feat/prod-changeset-cutover

  Aug 11, 202640s
  More actions for workflow run 183

• Prod changeset sync — Stage 1: infra prep (bucket + dedicated IRSA role)

  completed successfully:
  Semgrep SAST#182:Pull request#1061openedbyarielr-lt
  feat/prod-changeset-infra-prep

  Aug 5, 20261m 1s
  More actions for workflow run 182

• Sandbox: dedicated IRSA role + enable registry changeset sync

  completed successfully:
  Semgrep SAST#181:Pull request#1060synchronizebyarielr-lt
  feat/scope-sandbox-irsa-role

  Aug 5, 202641s
  More actions for workflow run 181