ID Title Status Priority Created Due Date Actions
#452 Sandbox wrapper.py JSON quoting vulnerability causes SyntaxError
In sandboxed_executor.py lines 187-188, args/kwargs are embedded in single-quoted strings: ```pytho...
closed high 2025-12-16 11:23 -
#451 P4: Dynamic Table Name Discovery in Janitor
Issue #16 from review: Hardcoded pattern breaks on schema changes. Location: engine/services/janitor...
closed low 2025-12-16 00:57 -
#450 P4: Add Encryption Migration Script
Issue #15 from review: Old data remains unencrypted. Location: engine/security/jsonb_encryption.py. ...
open low 2025-12-16 00:57 -
Edit
#449 P4: Set Real __file__ Path for Artifacts
Issue #13 from review: Libraries fail with virtual path. Location: engine/tools/python_task.py:237. ...
closed low 2025-12-16 00:57 -
#448 P3: Auto-Join for Parallel Operator
Issue #12 from review: Zombie branches possible. Location: engine/interpreters/operators.py:479-576....
closed medium 2025-12-16 00:56 -
#447 P3: Chunked Transaction Commits for Large Loops
Issue #10 from review: Transaction size bottleneck. Location: engine/interpreters/inline_executor.py...
open medium 2025-12-16 00:56 -
Edit
#446 P3: Default Sandbox Mode to Enabled
Issue #3 from review: Process state leakage risk. Location: engine/tools/python_task.py:61-68. Findi...
closed medium 2025-12-16 00:56 -
#445 P3: Add TTL to Vault Secret Cache
Issue #7 from review: Stale secrets after rotation. Location: engine/config.py:70,216-244. Finding: ...
closed medium 2025-12-16 00:56 -
#444 P2: Mark Telemetry as Provisional Until Commit
Issue #8 from review: Phantom success logs. Location: engine/sidecar_telemetry.py. Finding: autocomm...
closed high 2025-12-16 00:56 -
#443 P2: Encrypt NULL Values in JSONB
Issue #6 from review: NULL leaks information. Location: engine/security/jsonb_encryption.py:119-121....
closed high 2025-12-16 00:56 -
#442 P2: Fix Chunked Write O(N²) Performance
Issue #9 from review: Write amplification. Location: engine/utils/chunking.py:28. Finding: append() ...
closed high 2025-12-16 00:56 -
#441 P1: Add ast.Dict to Safe Expression Evaluator
Issue #14 from review: Conditions fail on dict values. Location: engine/interpreters/variable_resolv...
closed high 2025-12-16 00:56 -
#440 P1: TimeoutService Must Update workflow_run Status
Issue #11 from review: Zombie workflows in UI. Location: engine/services/timeout_service.py. Finding...
closed critical 2025-12-16 00:56 -
#439 P1: Enforce HIGHWAY_SANDBOX_SECRET in Production
Issue #5 from review: Ephemeral keys break distributed deployments. Location: engine/sandbox/executi...
closed critical 2025-12-16 00:56 -
#438 Implement Enterprise SSO (SAML/OIDC) for platform authentication
Add enterprise SSO support for Highway platform. Requirements: (1) SAML 2.0 support for enterprise I...
open medium 2025-12-15 09:35 -
Edit
#437 Missing oauth2_platform.py module causes startup warning
The api/app.py imports api.oauth_handlers.oauth2_platform.platform_auth_bp but the module was never ...
closed high 2025-12-15 09:33 -
#436 BUG: durable_cron never fires - last_run variable not persisted before first sleep
## Problem The durable_cron tool never actually spawns child workflows. It keeps waking up, recalcu...
closed critical 2025-12-14 21:04 -
#435 App: Container Task Runner (container_runner)
## Overview Execute arbitrary Docker containers as workflow tasks with input/output handling. Enable...
open low 2025-12-14 20:17 -
Edit
#434 App: RSS Digest Emailer (rss_digest)
## Overview Aggregate multiple RSS feeds, filter by keywords/date, and send daily/weekly email diges...
open medium 2025-12-14 20:17 -
Edit
#433 App: Invoice Generator (invoice_generator)
## Overview Generate professional PDF invoices from structured data with email delivery and S3 archi...
open low 2025-12-14 20:17 -
Edit
Previous Page 24 of 45 Next