Ettore Di Giacinto 9826547c42 fix(security): clear the gosec findings this branch introduced ...

Tighten the permissions that can be tightened and justify the ones that
cannot. The e2e harness creates its directories 0750 and writes its model
config and process logs 0600; the copied binary keeps 0755 because the
suite executes it.

Everything else is a gosec rule firing on code that is doing what it is
supposed to: jitter drawn from math/rand for a reconnect backoff, a fixed
credential for a throwaway cluster, and subprocesses launched from the
binary the suite just built. Each carries a #nosec naming the rule and
the reason, in the form the tree already uses.

Scanned before and after: 13 findings in the packages this branch added,
now 0. The one that remains in core/services/worker is byte-identical on
master and is not this branch's to silence.

Assisted-by: Claude Opus 5 [claude-code]
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-09-20 03:05:35 +00:00

..

e2e

fix(security): clear the gosec findings this branch introduced

2026-09-20 03:05:35 +00:00

e2e-aio

Revert "chore(tests): Avoid network, sleep and more during tests" (#11601)

2026-08-19 16:39:39 +02:00

e2e-backends

fix(ci): unbreak the e2e build and the darwin vllm-metal pin (#11849)

2026-09-03 18:32:02 +02:00

e2e-ui

feat(ui): editorial UI/UX overhaul - design language, shell/nav, conversation/canvas, sub-menus (#10390)

2026-06-18 23:03:27 +02:00

fixtures

feat(face-recognition): add insightface/onnx backend for 1:1 verify, 1:N identify, embedding, detection, analysis (#9480)

2026-04-22 21:55:41 +02:00

integration

feat(router): make KNN a first-class classifier with a persisted, curated corpus (#10652)

2026-08-18 09:37:43 +02:00

test_invariant_backend.py

fix: the trl backend's _do_training method directly ... in backend.py (#10422)

2026-06-21 17:40:29 +02:00