All pull requests

Pull requests

• Redact passwords from runtime snapshots

  #5542·Xeicker opened Oct 14, 2026Collaborator·

  ·
  14

• Label fuzzers with no jobs and fix input for no corpus

  #5541·dylanjew opened Oct 12, 2026Collaborator·

  ·

• Fix command injection in shell.remove_directory via FUZZ_INPUTS

  #5540·a1itkd opened Oct 10, 2026·

  ·
  1

• Fix issue redirector acl

  #5539·Manvikamboz opened Oct 10, 2026·

  ·

• Introduces a more strict is_gce() check

  #5536·IvanBM18 opened Oct 7, 2026Collaborator·2/2·

  ·

• [UI] Do not disclose a security testcase's issue through /issue/<testcase_id>

  #5534·r0g18 opened Oct 7, 2026·

  ·

• [UI] Escape event history values before rendering them as HTML

  #5533·r0g18 opened Oct 7, 2026·

  ·
  1

  1

• [Mac] Add support for Pub/Sub queues

  #5531·JuanMBriones opened Oct 6, 2026Contributor·

  ·

• Add corpus synchronization time metric

  #5530·brun0-matheus opened Oct 6, 2026Contributor·

  ·
  46

  

• [Better Tests] Add tests for coverage-guided fuzz targets

  Tests
  #5527·IvanBM18 opened Oct 5, 2026Collaborator·2/2·

  ·

• Test no docker change PR

  #5515·PauloVLB opened Oct 1, 2026Collaborator·

  ·

• Fix/docker/ppa retry

  #5514·PauloVLB opened Oct 1, 2026Collaborator·

  ·

• Run aapt with an argument list instead of a shell command string

  #5513·Denimworld12 opened Oct 1, 2026·

  ·
  1

• [DO NOT MERGE] Test the github fallback for install-build-deps

  #5511·PauloVLB opened Sep 30, 2026Collaborator·

  ·

• Apply the fuzzer hash rule to both crash states

  #5509·Denimworld12 opened Sep 30, 2026·

  ·
  2

• Harden session establishment in the App Engine login flow

  #5508·r0g18 opened Sep 29, 2026·

  ·

• [Better Tests] Add tests for fake blackbox fuzzer

  #5506·IvanBM18 opened Sep 29, 2026Collaborator·2/2·

  ·

• Bump the bundler group across 1 directory with 4 updates

  dependenciesruby
  #5501·dependabot[bot] opened Sep 26, 2026Bot·

  ·
  1

• fix(revisions): escape component/link_text/link_url in format_revision_list

  #5445·prasanna8585 opened Sep 1, 2026·

  ·

• [Pending Validation] Return execution success status from load_bigquery_stats script

  #5441·stormKx18 opened Aug 27, 2026Contributor·

  ·
  2

  

• Reject tar hard link targets that escape the output directory

  #5437·shaggyinsomniac opened Aug 26, 2026·

  ·
  1

• Require job access in revisions_info before disclosing component revisions

  #5431·herdiyana256 opened Aug 21, 2026·

  ·

• Fix fuzzer metadata injection via unicode line separator abuse

  #5429·JM00NJ opened Aug 15, 2026·

  ·
  1

  1

• Require job access in coverage_report before redirecting

  #5426·herdiyana256 opened Aug 14, 2026·

  ·
  1

• [Typing] Fix functional bugs and add defensive runtime improvements (Part 2: Runtime Fixes)

  #5425·letitz opened Aug 13, 2026Contributor·

  ·