Skip to content

getCbData - refactor logic - #103

Merged
DamianZaremba merged 3 commits into
mainfrom
feature/refactor-replica-database-logic
Jul 30, 2026
Merged

getCbData - refactor logic#103
DamianZaremba merged 3 commits into
mainfrom
feature/refactor-replica-database-logic

Conversation

@DamianZaremba

@DamianZaremba DamianZaremba commented Jul 23, 2026

Copy link
Copy Markdown
Member
  • Gate on page metadata
  • Split queries into seperate functions
  • Use common function for exception/metric handling

This is part 2 of 2 in a stack made with GitButler:

@github-actions

Copy link
Copy Markdown

Trivy Security Scan

cnb/lifecycle/launcher

Severity Package Installed Fixed CVE Title
🟠 HIGH stdlib v1.26.2 1.25.11, 1.26.4 CVE-2026-27145 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries
🟠 HIGH stdlib v1.26.2 1.25.10, 1.26.3 CVE-2026-33811 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
🟠 HIGH stdlib v1.26.2 1.25.10, 1.26.3 CVE-2026-33814 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame
🟠 HIGH stdlib v1.26.2 1.25.10, 1.26.3 CVE-2026-39820 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs
🟠 HIGH stdlib v1.26.2 1.25.12, 1.26.5, 1.27.0-rc.2 CVE-2026-39822 os: golang: Go os.Root: Symlink following vulnerability allows directory traversal
🟠 HIGH stdlib v1.26.2 1.25.10, 1.26.3 CVE-2026-39836 ELSA-2026-22121: golang security update (IMPORTANT)
🟠 HIGH stdlib v1.26.2 1.25.10, 1.26.3 CVE-2026-42499 net/mail: golang: net/mail: Denial of Service via pathological email address parsing
🟠 HIGH stdlib v1.26.2 1.25.11, 1.26.4 CVE-2026-42504 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

layers/sbom/launch/buildpacksio_lifecycle/launcher/sbom.cdx.json

Severity Package Installed Fixed CVE Title
🟠 HIGH stdlib 1.26.2 1.25.11, 1.26.4 CVE-2026-27145 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries
🟠 HIGH stdlib 1.26.2 1.25.10, 1.26.3 CVE-2026-33811 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
🟠 HIGH stdlib 1.26.2 1.25.10, 1.26.3 CVE-2026-33814 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame
🟠 HIGH stdlib 1.26.2 1.25.10, 1.26.3 CVE-2026-39820 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs
🟠 HIGH stdlib 1.26.2 1.25.12, 1.26.5, 1.27.0-rc.2 CVE-2026-39822 os: golang: Go os.Root: Symlink following vulnerability allows directory traversal
🟠 HIGH stdlib 1.26.2 1.25.10, 1.26.3 CVE-2026-39836 ELSA-2026-22121: golang security update (IMPORTANT)
🟠 HIGH stdlib 1.26.2 1.25.10, 1.26.3 CVE-2026-42499 net/mail: golang: net/mail: Denial of Service via pathological email address parsing
🟠 HIGH stdlib 1.26.2 1.25.11, 1.26.4 CVE-2026-42504 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

layers/sbom/launch/buildpacksio_lifecycle/launcher/sbom.spdx.json

Severity Package Installed Fixed CVE Title
🟠 HIGH stdlib 1.26.2 1.25.11, 1.26.4 CVE-2026-27145 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries
🟠 HIGH stdlib 1.26.2 1.25.10, 1.26.3 CVE-2026-33811 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
🟠 HIGH stdlib 1.26.2 1.25.10, 1.26.3 CVE-2026-33814 net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame
🟠 HIGH stdlib 1.26.2 1.25.10, 1.26.3 CVE-2026-39820 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs
🟠 HIGH stdlib 1.26.2 1.25.12, 1.26.5, 1.27.0-rc.2 CVE-2026-39822 os: golang: Go os.Root: Symlink following vulnerability allows directory traversal
🟠 HIGH stdlib 1.26.2 1.25.10, 1.26.3 CVE-2026-39836 ELSA-2026-22121: golang security update (IMPORTANT)
🟠 HIGH stdlib 1.26.2 1.25.10, 1.26.3 CVE-2026-42499 net/mail: golang: net/mail: Denial of Service via pathological email address parsing
🟠 HIGH stdlib 1.26.2 1.25.11, 1.26.4 CVE-2026-42504 mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

@DamianZaremba
DamianZaremba changed the base branch from main to feature/refactor-tools-db-usage July 23, 2026 11:34
@DamianZaremba
DamianZaremba force-pushed the feature/refactor-tools-db-usage branch from 4d3d86f to 0fad863 Compare July 23, 2026 11:35
@DamianZaremba
DamianZaremba force-pushed the feature/refactor-replica-database-logic branch from 6a32526 to 6b48fff Compare July 23, 2026 11:35
@DamianZaremba
DamianZaremba force-pushed the feature/refactor-tools-db-usage branch from 0fad863 to 99a5d8f Compare July 23, 2026 11:41
@DamianZaremba
DamianZaremba force-pushed the feature/refactor-replica-database-logic branch 3 times, most recently from 1662389 to 78ec62d Compare July 23, 2026 12:00
@DamianZaremba
DamianZaremba force-pushed the feature/refactor-tools-db-usage branch from 36e031a to 3d58012 Compare July 23, 2026 12:10
@DamianZaremba
DamianZaremba force-pushed the feature/refactor-replica-database-logic branch from 78ec62d to 1008863 Compare July 23, 2026 12:10
@DamianZaremba
DamianZaremba force-pushed the feature/refactor-tools-db-usage branch from 3d58012 to ffa0c8e Compare July 23, 2026 12:13
@DamianZaremba
DamianZaremba force-pushed the feature/refactor-replica-database-logic branch from 1008863 to 544c891 Compare July 23, 2026 12:13
Base automatically changed from feature/refactor-tools-db-usage to main July 23, 2026 12:15
@DamianZaremba
DamianZaremba force-pushed the feature/refactor-replica-database-logic branch from 544c891 to dd04662 Compare July 23, 2026 12:20
@DamianZaremba
DamianZaremba force-pushed the feature/refactor-replica-database-logic branch 5 times, most recently from 7bbec03 to e10854c Compare July 23, 2026 12:31
- Gate on page metadata
- Split queries into seperate functions
- Use common function for exception/metric handling
@DamianZaremba
DamianZaremba force-pushed the feature/refactor-replica-database-logic branch from e10854c to 45488eb Compare July 23, 2026 12:39
@DamianZaremba

Copy link
Copy Markdown
Member Author

Seems to be working as expected, but will wait until the weekend to merge (traveling).

@DamianZaremba

Copy link
Copy Markdown
Member Author

@DamianZaremba
DamianZaremba merged commit e8ede00 into main Jul 30, 2026
4 checks passed
@DamianZaremba
DamianZaremba deleted the feature/refactor-replica-database-logic branch July 30, 2026 07:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant