Skip to content

Actions: cisagov/Malcolm

Actions

Adds all issues that don't include the 'training' label to Malcolm project board

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
194 workflow runs
194 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

Fix multiple latent strelka-backend scanner bugs found during full-suite testing
Adds all issues that don't include the 'training' label to Malcolm project board #410: Issue #1111 opened by mmguero
7s
Imported configuration values set via apply_default() are not recognized as modified, causing fallback to defaults during import
Adds all issues that don't include the 'training' label to Malcolm project board #409: Issue #1110 opened by JedHawkins
8s
Can't build zeek container
Adds all issues that don't include the 'training' label to Malcolm project board #408: Issue #1109 opened by reuteras
2m 29s
nginx: missing auth gate and case-sensitivity mismatch on /dashboards/app/netbox/ redirect location
Adds all issues that don't include the 'training' label to Malcolm project board #407: Issue #1107 opened by mmguero
4m 23s
nginx: fix RBAC bypass via unresolved single-dot path segment in normalize_uri_for_rbac
Adds all issues that don't include the 'training' label to Malcolm project board #406: Issue #1106 opened by mmguero
27m 13s
file-upload: disable FilePond server-side fetch API to prevent SSRF via upload container
Adds all issues that don't include the 'training' label to Malcolm project board #405: Issue #1101 opened by mmguero
8s
Arkime randomly stops displaying sessions although packets are captured
Adds all issues that don't include the 'training' label to Malcolm project board #404: Issue #1099 opened by nicolaipre
11s
Add Raspberry Pi downstream kernel and complete Pi 5 hardware support to Forky image
Adds all issues that don't include the 'training' label to Malcolm project board #403: Issue #1098 opened by mmguero
21s
Hedgehog on Raspberry Pi seems to have issues setting the ufw firewall to the reachback ACL on start
Adds all issues that don't include the 'training' label to Malcolm project board #402: Issue #1097 opened by mmguero
18s
biomes dashboard visualizing connections between network zones
Adds all issues that don't include the 'training' label to Malcolm project board #401: Issue #1088 opened by mmguero
42s
Explicitly set Arkime authMode; default to s2s on sensor/live-capture nodes
Adds all issues that don't include the 'training' label to Malcolm project board #400: Issue #1087 opened by mmguero
10s
Fix CSRF-based unauthenticated script execution in hedgehog kiosk /script_call endpoint
Adds all issues that don't include the 'training' label to Malcolm project board #399: Issue #1086 opened by mmguero
8s
nginx: fix auth gate bypass and dead code in redirect-only locations
Adds all issues that don't include the 'training' label to Malcolm project board #398: Issue #1081 opened by mmguero
9s
NetBox API tokens (including SUPERUSER_API_TOKEN) broken after netboxRestore until full-stack restart
Adds all issues that don't include the 'training' label to Malcolm project board #397: Issue #1064 opened by mmguero
10s
filescan container needs to fail/restart if valkey isn't available
Adds all issues that don't include the 'training' label to Malcolm project board #396: Issue #1058 opened by mmguero
7s
Support Python 3.11 and earlier in authentication file error handling
Adds all issues that don't include the 'training' label to Malcolm project board #395: Issue #1056 opened by mmguero
7s
RBAC bypass in nginx Lua layer via percent-encoding, slash-doubling, and case variance
Adds all issues that don't include the 'training' label to Malcolm project board #394: Issue #1055 opened by mmguero
14s
filebeat: safe-extract.py: single-stream decompression paths not subject to bomb limits
Adds all issues that don't include the 'training' label to Malcolm project board #393: Issue #1054 opened by mmguero
9s
form-action 'self' in nginx CSP breaks SAML HTTP-POST binding redirects
Adds all issues that don't include the 'training' label to Malcolm project board #392: Issue #1052 opened by mmguero
8s
fix RBAC bypass via URI normalization mismatch in Nginx Lua auth layer (CVE-2026-63177)
Adds all issues that don't include the 'training' label to Malcolm project board #390: Issue #1042 opened by mmguero
9s
fix uncontrolled resource consumption in archive extraction — inode-exhaustion DoS (CVE-2026-63133)
Adds all issues that don't include the 'training' label to Malcolm project board #389: Issue #1041 opened by mmguero
7s
fix path traversal in archive extraction directory handling (CVE-2026-63134)
Adds all issues that don't include the 'training' label to Malcolm project board #388: Issue #1040 opened by mmguero
10s
Fix broken signal chain in docker-uid-gid-setup.sh privilege drop
Adds all issues that don't include the 'training' label to Malcolm project board #387: Issue #1039 opened by mmguero
17s
PostgreSQL container doesn't support major PG version upgrades
Adds all issues that don't include the 'training' label to Malcolm project board #386: Issue #1038 opened by MidnightShadow66
6s