Skip to content

security: close the remaining gaps after the Grafana hardening - #512

Merged
OisinKyne merged 3 commits into
mainfrom
oisin/hardening-follow-up
Nov 9, 2026
Merged

OisinKyne merged 3 commits into
mainfrom
oisin/hardening-follow-up

Merge branch 'main' into oisin/hardening-follow-up

c38c5d4
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis succeeded Nov 9, 2026 in 22s

Annotations

Check failure on line 98 in .github/scripts/check_exposure.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 22 to the 15 allowed.

See more on https://sonarcloud.io/project/issues?id=ObolNetwork_charon-distributed-validator-node&issues=AaGCQE2IcNvCNlWV2pE2&open=AaGCQE2IcNvCNlWV2pE2&pullRequest=512

Check failure on line 123 in .github/scripts/check_exposure.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 29 to the 15 allowed.

See more on https://sonarcloud.io/project/issues?id=ObolNetwork_charon-distributed-validator-node&issues=AaGCQE2IcNvCNlWV2pE3&open=AaGCQE2IcNvCNlWV2pE3&pullRequest=512

Check warning on line 72 in .github/scripts/check_exposure.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Simplify this regular expression to reduce its runtime, as it has super-linear performance due to backtracking.

See more on https://sonarcloud.io/project/issues?id=ObolNetwork_charon-distributed-validator-node&issues=AaGCQE2IcNvCNlWV2pE1&open=AaGCQE2IcNvCNlWV2pE1&pullRequest=512

Check failure on line 63 in grafana/security-check.sh

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Add a default case (*) to handle unexpected values.

See more on https://sonarcloud.io/project/issues?id=ObolNetwork_charon-distributed-validator-node&issues=AaGCQE4dcNvCNlWV2pE4&open=AaGCQE4dcNvCNlWV2pE4&pullRequest=512