Skip to content

feat: Virtru as attribute store #40634

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
KevLehman wants to merge 61 commits into
base: develop
Choose a base branch
from

log

d85927a
Select commit
Loading
Failed to load commit list.
Draft

feat: Virtru as attribute store #40634

log
d85927a
Select commit
Loading
Failed to load commit list.
RC - Layne / Layne Security Scan succeeded May 22, 2026 in 8s

Layne — success

⚠️ Scan passed with excepted findings.

Found 3 issue(s): 0 critical, 3 high, 0 medium, 0 low.

Excepted findings:

  • LAYNE-8598b68f3ce8435a [semgrep/app.config.semgrep.rules.rocketchat.ssrf-validation-bypass-without-justification] ee/packages/abac/src/clients/virtru/VirtruClient.ts:37 — excepted by @julio-rocketchat: "these are acceptable and valid ignoreSsrfValidation entries, not vulnerabilities"
  • LAYNE-e568b73325f960fd [semgrep/app.config.semgrep.rules.rocketchat.ssrf-validation-bypass-without-justification] ee/packages/abac/src/clients/virtru/VirtruClient.ts:67 — excepted by @julio-rocketchat: "these are acceptable and valid ignoreSsrfValidation entries, not vulnerabilities"
  • LAYNE-5929c5f8cb7138d7 [semgrep/app.config.semgrep.rules.rocketchat.ssrf-validation-bypass-without-justification] ee/packages/abac/src/clients/virtru/VirtruClient.ts:103 — excepted by @julio-rocketchat: "these are acceptable and valid ignoreSsrfValidation entries, not vulnerabilities"

All findings are still annotated below for reference.

Annotations

Check failure on line 37 in ee/packages/abac/src/clients/virtru/VirtruClient.ts

See this annotation in the file changed.

@rc-layne rc-layne / Layne Security Scan

[semgrep] app.config.semgrep.rules.rocketchat.ssrf-validation-bypass-without-justification 

[R37] SSRF validation is disabled. Ensure the URL is not user-controlled or is restricted to a known-safe allowlist.

Check failure on line 67 in ee/packages/abac/src/clients/virtru/VirtruClient.ts

See this annotation in the file changed.

@rc-layne rc-layne / Layne Security Scan

[semgrep] app.config.semgrep.rules.rocketchat.ssrf-validation-bypass-without-justification 

[R67] SSRF validation is disabled. Ensure the URL is not user-controlled or is restricted to a known-safe allowlist.

Check failure on line 103 in ee/packages/abac/src/clients/virtru/VirtruClient.ts

See this annotation in the file changed.

@rc-layne rc-layne / Layne Security Scan

[semgrep] app.config.semgrep.rules.rocketchat.ssrf-validation-bypass-without-justification 

[R103] SSRF validation is disabled. Ensure the URL is not user-controlled or is restricted to a known-safe allowlist.
View more details on RC - Layne