You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@shardingsphere.apache.org by "jiangML (via GitHub)" <gi...@apache.org> on 2026/07/29 07:41:11 UTC
[PR] Fix cross-namespace vulnerability [shardingsphere-on-cloud]
jiangML opened a new pull request, #496:
URL: https://github.com/apache/shardingsphere-on-cloud/pull/496
<!-- Please answer these questions before submitting a pull request -->
### Type of change:
<!-- Please delete options that are not relevant. -->
- [ ] Bugfix
- [ ] New feature provided
- [ ] Improve performance
- [ ] Backport patches
### What this PR does / why we need it:
<!--- Why is this change required? What problem does it solve? -->
<!--- If it fixes an open issue, please link to the issue here. -->
### Pre-submission checklist:
<!--
Please follow the requirements:
1. Test is required for the feat/fix PR, unless you have a good reason
2. Doc is required for the feat PR
3. Use "request review" to notify the reviewer once you have resolved the review
-->
* [ ] Did you explain what problem does this PR solve? Or what new features have been added?
* [ ] Have you added corresponding test cases?
* [ ] Have you modified the corresponding document?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] fix: cross-namespace vulnerability [shardingsphere-on-cloud]
Posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org>.
sonarqubecloud[bot] commented on PR #496:
URL: https://github.com/apache/shardingsphere-on-cloud/pull/496#issuecomment-5139475999
## [](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496) **Quality Gate failed**
Failed conditions
 [C Security Rating on New Code](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496) (required ≥ A)
<!-- sqra:qg_revision=9ddc491252e6fe820bf67390bc1c8ec7e3c42923d3db3651c6a529020ada0f70 -->
<!-- sqra-placement-anchor -->
[See analysis details on SonarQube Cloud](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496)
##
 Catch issues before they fail your Quality Gate with our IDE extension  [SonarQube for IDE](https://www.sonarsource.com/products/sonarlint/features/connected-mode/?referrer=pull-request)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] fix: cross-namespace vulnerability [shardingsphere-on-cloud]
Posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org>.
sonarqubecloud[bot] commented on PR #496:
URL: https://github.com/apache/shardingsphere-on-cloud/pull/496#issuecomment-5115354177
## [](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496) **Quality Gate passed**
Issues
 [0 New issues](https://sonarcloud.io/project/issues?id=apache_shardingsphere-on-cloud&pullRequest=496&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true)
 [0 Accepted issues](https://sonarcloud.io/project/issues?id=apache_shardingsphere-on-cloud&pullRequest=496&issueStatuses=ACCEPTED)
Measures
 [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=apache_shardingsphere-on-cloud&pullRequest=496&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true)
 [0.0% Coverage on New Code](https://sonarcloud.io/component_measures?id=apache_shardingsphere-on-cloud&pullRequest=496&metric=new_coverage&view=list)
 [0.0% Duplication on New Code](https://sonarcloud.io/component_measures?id=apache_shardingsphere-on-cloud&pullRequest=496&metric=new_duplicated_lines_density&view=list)
<!-- sqra-placement-anchor -->
[See analysis details on SonarQube Cloud](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] fix: cross-namespace vulnerability [shardingsphere-on-cloud]
Posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org>.
sonarqubecloud[bot] commented on PR #496:
URL: https://github.com/apache/shardingsphere-on-cloud/pull/496#issuecomment-5139054270
## [](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496) **Quality Gate failed**
Failed conditions
 [C Security Rating on New Code](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496) (required ≥ A)
<!-- sqra:qg_revision=9ddc491252e6fe820bf67390bc1c8ec7e3c42923d3db3651c6a529020ada0f70 -->
<!-- sqra-placement-anchor -->
[See analysis details on SonarQube Cloud](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496)
##
 Catch issues before they fail your Quality Gate with our IDE extension  [SonarQube for IDE](https://www.sonarsource.com/products/sonarlint/features/connected-mode/?referrer=pull-request)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] fix: cross-namespace vulnerability [shardingsphere-on-cloud]
Posted by "codecov-commenter (via GitHub)" <gi...@apache.org>.
codecov-commenter commented on PR #496:
URL: https://github.com/apache/shardingsphere-on-cloud/pull/496#issuecomment-5138911902
## [Codecov](https://app.codecov.io/gh/apache/shardingsphere-on-cloud/pull/496?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) Report
:x: Patch coverage is `72.72727%` with `3 lines` in your changes missing coverage. Please review.
:white_check_mark: Project coverage is 36.78%. Comparing base ([`8cb6480`](https://app.codecov.io/gh/apache/shardingsphere-on-cloud/commit/8cb648088ee0d9dfd2f488c2d5bca453a2fcfe28?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)) to head ([`1a79eae`](https://app.codecov.io/gh/apache/shardingsphere-on-cloud/commit/1a79eae3cff03563449b9e294bb8c8e26c5232c3?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)).
:warning: Report is 16 commits behind head on main.
| [Files with missing lines](https://app.codecov.io/gh/apache/shardingsphere-on-cloud/pull/496?dropdown=coverage&src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | Patch % | Lines |
|---|---|---|
| [...perator/pkg/controllers/storage\_node\_controller.go](https://app.codecov.io/gh/apache/shardingsphere-on-cloud/pull/496?src=pr&el=tree&filepath=shardingsphere-operator%2Fpkg%2Fcontrollers%2Fstorage_node_controller.go&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache#diff-c2hhcmRpbmdzcGhlcmUtb3BlcmF0b3IvcGtnL2NvbnRyb2xsZXJzL3N0b3JhZ2Vfbm9kZV9jb250cm9sbGVyLmdv) | 72.72% | [2 Missing and 1 partial :warning: ](https://app.codecov.io/gh/apache/shardingsphere-on-cloud/pull/496?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
<details><summary>Additional details and impacted files</summary>
```diff
@@ Coverage Diff @@
## main #496 +/- ##
==========================================
- Coverage 36.81% 36.78% -0.04%
==========================================
Files 60 60
Lines 6945 6957 +12
==========================================
+ Hits 2557 2559 +2
- Misses 4142 4150 +8
- Partials 246 248 +2
```
</details>
[:umbrella: View full report in Codecov by Harness](https://app.codecov.io/gh/apache/shardingsphere-on-cloud/pull/496?dropdown=coverage&src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache).
:loudspeaker: Have feedback on the report? [Share it here](https://about.codecov.io/codecov-pr-comment-feedback/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache).
<details><summary> :rocket: New features to boost your workflow: </summary>
- :snowflake: [Test Analytics](https://docs.codecov.com/docs/test-analytics): Detect flaky tests, report on failures, and find test suite problems.
- :package: [JS Bundle Analysis](https://docs.codecov.com/docs/javascript-bundle-analysis): Save yourself from yourself by tracking and limiting bundle sizes in JS merges.
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] fix: cross-namespace vulnerability [shardingsphere-on-cloud]
Posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org>.
sonarqubecloud[bot] commented on PR #496:
URL: https://github.com/apache/shardingsphere-on-cloud/pull/496#issuecomment-5138891520
## [](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496) **Quality Gate failed**
Failed conditions
 [C Security Rating on New Code](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496) (required ≥ A)
<!-- sqra:qg_revision=d368b97601706ad38374d40dc7981d7a58a00100e653ea42524bfc6491203ecb -->
<!-- sqra-placement-anchor -->
[See analysis details on SonarQube Cloud](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496)
##
 Catch issues before they fail your Quality Gate with our IDE extension  [SonarQube for IDE](https://www.sonarsource.com/products/sonarlint/features/connected-mode/?referrer=pull-request)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Fix cross-namespace vulnerability [shardingsphere-on-cloud]
Posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org>.
sonarqubecloud[bot] commented on PR #496:
URL: https://github.com/apache/shardingsphere-on-cloud/pull/496#issuecomment-5114618756
## [](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496) **Quality Gate passed**
Issues
 [0 New issues](https://sonarcloud.io/project/issues?id=apache_shardingsphere-on-cloud&pullRequest=496&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true)
 [0 Accepted issues](https://sonarcloud.io/project/issues?id=apache_shardingsphere-on-cloud&pullRequest=496&issueStatuses=ACCEPTED)
Measures
 [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=apache_shardingsphere-on-cloud&pullRequest=496&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true)
 [0.0% Coverage on New Code](https://sonarcloud.io/component_measures?id=apache_shardingsphere-on-cloud&pullRequest=496&metric=new_coverage&view=list)
 [0.0% Duplication on New Code](https://sonarcloud.io/component_measures?id=apache_shardingsphere-on-cloud&pullRequest=496&metric=new_duplicated_lines_density&view=list)
<!-- sqra-placement-anchor -->
[See analysis details on SonarQube Cloud](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] fix: cross-namespace vulnerability [shardingsphere-on-cloud]
Posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org>.
sonarqubecloud[bot] commented on PR #496:
URL: https://github.com/apache/shardingsphere-on-cloud/pull/496#issuecomment-5128660188
## [](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496) **Quality Gate failed**
Failed conditions
 [C Security Rating on New Code](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496) (required ≥ A)
<!-- sqra:qg_revision=d368b97601706ad38374d40dc7981d7a58a00100e653ea42524bfc6491203ecb -->
<!-- sqra-placement-anchor -->
[See analysis details on SonarQube Cloud](https://sonarcloud.io/dashboard?id=apache_shardingsphere-on-cloud&pullRequest=496)
##
 Catch issues before they fail your Quality Gate with our IDE extension  [SonarQube for IDE](https://www.sonarsource.com/products/sonarlint/features/connected-mode/?referrer=pull-request)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org