Search results

ci: least-privilege GITHUB_TOKEN and no long-lived tokens

Status: Open.

#865 In OWASP/SecurityShepherd;

· ismisepaul opened on May 31, 2026

perf: parallelize integration tests via GitHub Actions matrix sharding (4 shards)

Enhancement

github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions code

Test Automation

Status: Open.

#863 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Migrate from javax.* (Java EE) to jakarta.* (Jakarta EE 9+) to enable Spring 6 / modern stack

Enhancement

javaPull requests that update java codePull requests that update java code

Status: Open.

#861 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Improve misleading "JavaScript validation bypassed" log message in AddPlayer

Status: Open.

#860 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Replace inefficient new String() constructors in GetterIT.testSSOAuthExistingUserRelogin

Status: Open.

#859 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Review/dismiss CodeQL double-checked-locking flag on MongoDatabase.baseMongoClient

Status: Open.

#858 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Convert challenge/lesson servlets to try-with-resources (connection-leak cleanup)

Status: Open.

#857 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Refactor remaining Getter.java JDBC sites to try-with-resources

Status: Open.

#855 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Replace brittle Tomcat server.xml/web.xml patches with a robust mechanism

Status: Open.

#848 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Refactor remaining Setter.java JDBC sites to try-with-resources (structural cases)

Status: Open.

#846 In OWASP/SecurityShepherd;

· ismisepaul opened on May 29, 2026

Timezone bug: suspended user can authenticate on non-UTC JVM deployments

Bug

Status: Open.

#841 In OWASP/SecurityShepherd;

· ismisepaul opened on May 11, 2026

Convert ResultSet-returning Getter methods to bounded collections (DAO refactor follow-up)

Status: Open.

#839 In OWASP/SecurityShepherd;

· ismisepaul opened on May 10, 2026