All pull requests

Pull requests

• Add Trivy vulnerability scanning for the Docker image

  cidockersecurity
  #1141·vharseko opened Sep 18, 2026·

  ·
  1

• Run the CodeQL security-and-quality suite

  cisecurity
  #1140·vharseko opened Sep 18, 2026·

  ·

• Read SAML parameters from their binding in the .NET Fedlet; run e2e scripts without a shell

  dotnetjavascriptsamlsecuritytests
  #1139·vharseko opened Sep 18, 2026·

  ·

• Keep stack traces and exception messages out of HTTP responses

  javasecuritytests
  #1138·vharseko opened Sep 18, 2026·

  ·

• Keep a logged value from forging a debug record

  javasecuritytests
  #1137·vharseko opened Sep 18, 2026·

  ·

• Set the Secure and HttpOnly cookie flags from creation

  javasecuritytests
  #1136·vharseko opened Sep 18, 2026·

  ·

• Check the SAML 1.x TARGET and the WS-Federation wreply against the realm's valid goto URLs

  javasamlsecuritytests
  #1135·vharseko opened Sep 18, 2026·

  ·

• Close the cheap CodeQL findings: pinned actions, token scopes, TLS identity, private temp files

  cidependenciesjavasecuritytests
  #1134·vharseko opened Sep 18, 2026·

  ·
  2

• Run the security filters on every dispatch type

  javasecuritytests
  #1133·vharseko opened Sep 18, 2026·

  ·

• Fix Device Code session propagation and OIDC claims

  #1108·dairoca90 opened Aug 15, 2026·

  ·
  8

• Update org.openidentityplatform.opendj to 5.2.0-SNAPSHOT

  #1102·vharseko opened Aug 6, 2026·

  ·

• Migrate configurator/upgrade wizard from Apache Click to Jakarta Servlets + FreeMarker

  dependenciesjavaneeds testingrefactoringtestsui
  #1062·maximthomas opened Jul 8, 2026·

  ·

  · 16.2.0
  2

  18

• Enable HttpOnly session cookies by default

  help wantedneeds testingsecurity
  #1059·vharseko opened Jun 20, 2026·

  ·

  · 16.2.0
  2

• JAXB3 Migration

  help wantedneeds testingrefactoring
  #1023·maximthomas opened May 21, 2026·

  ·

  · 16.2.0
  1

  6