Skip to content

Add files for the Anthropic OSS-Scanner to run - #3865

Merged
micbar merged 1 commit into
mainfrom
addOssScannerDocker
Oct 30, 2026
Merged

micbar merged 1 commit into
mainfrom
addOssScannerDocker

Conversation

@dragotin

Copy link
Copy Markdown
Member

Needed to have the Anthropic OSS Scanner check OpenCloud

@dragotin
dragotin requested a review from micbar October 30, 2026 10:27
@codacy-production

codacy-production Bot commented Oct 30, 2026 •

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Coverage ∅ diff coverage · 0.00% coverage variation

Metric Results
Coverage variation ✅ 0.00% coverage variation (-1.00%)
Diff coverage ✅ ∅ diff coverage

View coverage diff in Codacy

Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (120750d) 92682 25901 27.95%
Head commit (1248f08) 92682 (+0) 25899 (-2) 27.94% (0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#3865) 0 0 ∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

- Unauthenticated requests: public links (`/s/<token>`, `/remote.php/dav/public-files/<token>`), the IDP login and OIDC endpoints (`/signin`, `/konnect`, `/.well-known/openid-configuration`), `/status.php`, capabilities and webfinger.
- Guest links: `verify/token`, `renew` and `verify/pin` under `/graph/v1beta1/extensions/org.libregraph/guestLinks/` take requests without a session.
- Authenticated users via WebDAV (`/remote.php/dav/spaces`, `/remote.php/dav/files`, `/remote.php/webdav`), the LibreGraph API (`/graph`), OCS (`/ocs/v[12].php`), TUS uploads, app tokens (`/auth-app/tokens`), the archiver (`/archiver`), settings (`/api/v0/settings`), and the search, thumbnails, sse and userlog endpoints.
- File content uploaded by users: thumbnails, search indexing, and archive downloads.

@butonic butonic Oct 30, 2026 •

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hm the user uploads data that is sent to tika or imagor and opencloud takes whatever they send back ... there might also be a problem if we interpret the extracted contet, which we do for some thumbnails AFAICT. But tika is not part of the default setup...

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

out of scope of this test.

Comment thread .oss-scanner/threat_model.md Resolved
@micbar
micbar merged commit 1f45d32 into main Oct 30, 2026
61 of 62 checks passed
@micbar
micbar deleted the addOssScannerDocker branch October 30, 2026 14:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants