fix: using the right body #100

Merged

alpha-nerd merged 1 commit from workflow-tuning into main

2026-05-30 11:26:23 +02:00

alpha-nerd commented

2026-05-30 11:10:37 +02:00

Owner

No description provided.

alpha-nerd added 1 commit 2026-05-30 11:10:38 +02:00

.forgejo/workflows/opencode.yml aktualisiert

NYX Security Scan / nyx-scan (pull_request) Failing after 6m39s

Details

fd5b131ff4

alpha-nerd commented

2026-05-30 11:17:15 +02:00

Author

Owner

🔴 NYX found 13 issue(s)

ERROR router.py:1230:38 [py.auth.token_override_without_validation] — token acceptance flow writes through oclient.chat.completions.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:1960:35 [py.auth.token_override_without_validation] — token acceptance flow writes through oclient.completions.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:2195:39 [py.auth.token_override_without_validation] — token acceptance flow writes through oclient.chat.completions.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:2357:35 [py.auth.token_override_without_validation] — token acceptance flow writes through client.embeddings.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:2422:35 [py.auth.token_override_without_validation] — token acceptance flow writes through client.embeddings.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:2479:24 [py.auth.token_override_without_validation] — token acceptance flow writes through client.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:2679:26 [py.auth.token_override_without_validation] — token acceptance flow writes through client.delete without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:3122:27 [py.auth.token_override_without_validation] — token acceptance flow writes through oclient.embeddings.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:3355:35 [py.auth.token_override_without_validation] — token acceptance flow writes through oclient.chat.completions.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:3547:27 [py.auth.token_override_without_validation] — token acceptance flow writes through oclient.completions.create without validating that token expiration is not validated, token recipient identity is not validated
WARNING db.py:26:21 [state-resource-leak] — resource self is never closed
WARNING router.py:1:1 [state-resource-leak] — resource aspect_ratio is never closed
WARNING router.py:1372:9 [cfg-resource-leak] — Image.open acquires file handle but not all exit paths release it

## 🔴 NYX found 13 issue(s) - **ERROR** `router.py:1230:38` [py.auth.token_override_without_validation] — token acceptance flow writes through `oclient.chat.completions.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:1960:35` [py.auth.token_override_without_validation] — token acceptance flow writes through `oclient.completions.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:2195:39` [py.auth.token_override_without_validation] — token acceptance flow writes through `oclient.chat.completions.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:2357:35` [py.auth.token_override_without_validation] — token acceptance flow writes through `client.embeddings.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:2422:35` [py.auth.token_override_without_validation] — token acceptance flow writes through `client.embeddings.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:2479:24` [py.auth.token_override_without_validation] — token acceptance flow writes through `client.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:2679:26` [py.auth.token_override_without_validation] — token acceptance flow writes through `client.delete` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:3122:27` [py.auth.token_override_without_validation] — token acceptance flow writes through `oclient.embeddings.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:3355:35` [py.auth.token_override_without_validation] — token acceptance flow writes through `oclient.chat.completions.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:3547:27` [py.auth.token_override_without_validation] — token acceptance flow writes through `oclient.completions.create` without validating that token expiration is not validated, token recipient identity is not validated - **WARNING** `db.py:26:21` [state-resource-leak] — resource `self` is never closed - **WARNING** `router.py:1:1` [state-resource-leak] — resource `aspect_ratio` is never closed - **WARNING** `router.py:1372:9` [cfg-resource-leak] — `Image.open` acquires file handle but not all exit paths release it