workflow-tuning #74

Closed

alpha-nerd wants to merge 0 commits from workflow-tuning into main

alpha-nerd commented

2026-05-13 10:15:46 +02:00

Owner

No description provided.

alpha-nerd added 3 commits 2026-05-13 10:15:47 +02:00

.forgejo/workflows/opencode.yml hinzugefügt b49f1f170a

add opencode bot for automatic issue management

nyx security scanner integration 69253a7e0d

.forgejo/workflows/nyxscanner.yml aktualisiert

NYX Security Scan / nyx-scan (pull_request) Failing after 6m31s

Details

f4bc272e0b

alpha-nerd commented

2026-05-13 10:27:30 +02:00

Author

Owner

🔴 NYX found 13 issue(s)

ERROR router.py:1230:38 [py.auth.token_override_without_validation] — token acceptance flow writes through oclient.chat.completions.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:1960:35 [py.auth.token_override_without_validation] — token acceptance flow writes through oclient.completions.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:2195:39 [py.auth.token_override_without_validation] — token acceptance flow writes through oclient.chat.completions.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:2357:35 [py.auth.token_override_without_validation] — token acceptance flow writes through client.embeddings.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:2422:35 [py.auth.token_override_without_validation] — token acceptance flow writes through client.embeddings.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:2479:24 [py.auth.token_override_without_validation] — token acceptance flow writes through client.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:2679:26 [py.auth.token_override_without_validation] — token acceptance flow writes through client.delete without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:3122:27 [py.auth.token_override_without_validation] — token acceptance flow writes through oclient.embeddings.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:3355:35 [py.auth.token_override_without_validation] — token acceptance flow writes through oclient.chat.completions.create without validating that token expiration is not validated, token recipient identity is not validated
ERROR router.py:3547:27 [py.auth.token_override_without_validation] — token acceptance flow writes through oclient.completions.create without validating that token expiration is not validated, token recipient identity is not validated
WARNING db.py:26:21 [state-resource-leak] — resource self is never closed
WARNING router.py:1:1 [state-resource-leak] — resource aspect_ratio is never closed
WARNING router.py:1372:9 [cfg-resource-leak] — Image.open acquires file handle but not all exit paths release it

## 🔴 NYX found 13 issue(s) - **ERROR** `router.py:1230:38` [py.auth.token_override_without_validation] — token acceptance flow writes through `oclient.chat.completions.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:1960:35` [py.auth.token_override_without_validation] — token acceptance flow writes through `oclient.completions.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:2195:39` [py.auth.token_override_without_validation] — token acceptance flow writes through `oclient.chat.completions.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:2357:35` [py.auth.token_override_without_validation] — token acceptance flow writes through `client.embeddings.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:2422:35` [py.auth.token_override_without_validation] — token acceptance flow writes through `client.embeddings.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:2479:24` [py.auth.token_override_without_validation] — token acceptance flow writes through `client.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:2679:26` [py.auth.token_override_without_validation] — token acceptance flow writes through `client.delete` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:3122:27` [py.auth.token_override_without_validation] — token acceptance flow writes through `oclient.embeddings.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:3355:35` [py.auth.token_override_without_validation] — token acceptance flow writes through `oclient.chat.completions.create` without validating that token expiration is not validated, token recipient identity is not validated - **ERROR** `router.py:3547:27` [py.auth.token_override_without_validation] — token acceptance flow writes through `oclient.completions.create` without validating that token expiration is not validated, token recipient identity is not validated - **WARNING** `db.py:26:21` [state-resource-leak] — resource `self` is never closed - **WARNING** `router.py:1:1` [state-resource-leak] — resource `aspect_ratio` is never closed - **WARNING** `router.py:1372:9` [cfg-resource-leak] — `Image.open` acquires file handle but not all exit paths release it