Skip to content

Add Codacy security scan workflow#22

Merged
damachine merged 2 commits intomainfrom
damachine-patch-1
Sep 12, 2025
Merged

Add Codacy security scan workflow#22
damachine merged 2 commits intomainfrom
damachine-patch-1

Conversation

@damachine
Copy link
Owner

No description provided.

@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

3 similar comments
@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@damachine damachine merged commit a622520 into main Sep 12, 2025
11 checks passed
@damachine damachine deleted the damachine-patch-1 branch September 12, 2025 14:35
damachine added a commit that referenced this pull request Sep 12, 2025
* bump version to 1.57

* instructions

* Add Codacy security scan workflow (#22)

* fix: resolve vulnerabilities in file operations

- Replace unsafe fopen() calls with secure stat() checks in main.c
- Add symlink attack protection for PID file creation
- Implement regular file validation before opening VERSION files
- Enhance PID file reading with file type verification
- Prevent TOCTOU (Time-of-Check Time-of-Use) race conditions
- Add comprehensive error handling for security edge cases

Security improvements address Flawfinder warnings and follow
OWASP secure coding practices for file system operations.

* Delete instructions (#23)

* bump version to 1.58

bump version to 1.58
@damachine damachine mentioned this pull request Sep 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant